Security
فارسی
All products

Red Hat Satellite 6/nodejs-webpack

Red Hat · Package
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decodingCVE-2026-110306 · GHSA-W74X-V6F9-J3XG fast-uriCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat Medium Fix reported
fast-uri vulnerable to improper path equivalence in relative reference normalizationCVE-2026-110095 · GHSA-XHQ7-XMQJ-769H fast-uriCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat Low Fix reported
fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix referencesCVE-2026-110725 · GHSA-333X-W4R6-6CRP fast-uriCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat Low Fix reported
fast-uri vulnerable to inconsistent host case normalization via percent-encoded octetsCVE-2026-86472 · GHSA-HRR3-GC8F-F4QJ fast-uriCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat Medium Fix reported
fast-uri vulnerable to authority injection via an unvalidated port in serializeCVE-2026-84292 · GHSA-QW65-CVWX-89V3 fast-uriMulticluster Engine for Kubernetes/multicluster-engine/console-mce-rhel9 npmRed Hat High Fix reported
fast-uri vulnerable to host confusion via an unclosed bracket in the URI authorityCVE-2026-84394 · GHSA-58MR-GQGX-XQ4G fast-uriCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat High Fix reported
fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative referencesCVE-2026-75931 · GHSA-5JGF-P345-68V8 fast-uriOpenShift Lightspeed/openshift-lightspeed/lightspeed-agentic-console-rhel9 npmRed Hat High Fix reported
fast-uri vulnerable to server-side request forgery via repeated hostname percent-decodingCVE-2026-75899 · GHSA-FPH4-WMHF-6FWF fast-uriOpenShift Lightspeed/openshift-lightspeed/lightspeed-agentic-console-rhel9 npmRed Hat High Fix reported
webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behaviorCVE-2025-68458 · GHSA-8FGC-7CC6-RX7X webpackCryostat 4/io.cryostat-cryostat npmRed Hat Low Fix reported
webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects → SSRF + cache persistenceCVE-2025-68157 · GHSA-38R7-794H-5758 webpackCryostat 4/io.cryostat-cryostat npmRed Hat Low Fix reported
Webpack's AutoPublicPathRuntimeModule has a DOM Clobbering Gadget that leads to XSSCVE-2024-43788 · GHSA-4VVJ-4CPR-P986 webpackLogging Subsystem for Red Hat OpenShift/openshift-logging/logging-view-plugin-rhel8 npmRed Hat Medium Fix reported
Uncontrolled resource consumption in bracesCVE-2024-4068 · GHSA-GRV7-FG5C-XMJG bracesCryostat 2/braces npmRed Hat High Fix reported