Security
فارسی
All products

Red Hat Enterprise Linux 6/thunderbird

Red Hat · Package
1080 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
crossbeam-deque Data Race before v0.7.4 and v0.8.1CVE-2021-32810 · GHSA-PQQP-XMHJ-WGCWVersion ranges need review. crossbeam-dequeRed Hat Enterprise Linux 6/firefox Rust / CargoRed Hat Critical Fix reported
Path traversal in webpack-dev-middlewareCVE-2024-29180 · GHSA-WR3J-PWJ9-HQQ6 webpack-dev-middlewareMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-console-plugin-rhel9 npmRed Hat High Fix reported
AngularJS improperly sanitizes SVG elementsCVE-2025-0716 · GHSA-J58C-WW9W-PWP5 angularLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 npmRed Hat Low No fix reported
Formidable relies on hexoid to prevent guessing of filenames for untrusted executable contentCVE-2025-46653 · GHSA-75V8-2H7P-7M2M formidableOpenShift Serverless/openshift-serverless-1/kn-backstage-plugins-eventmesh-rhel8 npmRed Hat Low Fix reported
path-to-regexp contains a ReDoSCVE-2024-52798 · GHSA-RHX6-C78J-4Q9W path-to-regexpLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 npmRed Hat High Fix reported
`idna` accepts Punycode labels that do not produce any non-ASCII when decodedCVE-2024-12224 · GHSA-H97M-WW89-6JMQVersion ranges need review. idnaOpenShift Serverless/openshift-serverless-1/kn-plugin-func-func-util-rhel8 Rust / CargoRed Hat Medium Fix reported
send vulnerable to template injection that can lead to XSSCVE-2024-43799 · GHSA-M6FV-JMCG-4JFG sendCryostat 3/send npmRed Hat Low Fix reported
serve-static vulnerable to template injection that can lead to XSSCVE-2024-43800 · GHSA-CM22-4G7W-348P serve-staticCryostat 3/serve-static npmRed Hat Low Fix reported
express vulnerable to XSS via response.redirect()CVE-2024-43796 · GHSA-QW6H-VGH9-J6WX expressCryostat 3/express npmRed Hat Low Fix reported
body-parser vulnerable to denial of service when url encoding is enabledCVE-2024-45590 · GHSA-QWCR-R2FM-QRC7 body-parserCryostat 3/body-parser npmRed Hat High Fix reported
Webpack's AutoPublicPathRuntimeModule has a DOM Clobbering Gadget that leads to XSSCVE-2024-43788 · GHSA-4VVJ-4CPR-P986 webpackLogging Subsystem for Red Hat OpenShift/openshift-logging/logging-view-plugin-rhel8 npmRed Hat Medium Fix reported
PDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDFCVE-2024-4367 · GHSA-WGRM-67XF-HHPQ pdfjs-distRed Hat Enterprise Linux 6/firefox npmRed HatWordPress High Fix reported
Regular Expression Denial of Service (ReDoS) in micromatchCVE-2024-4067 · GHSA-952P-6RRQ-RCJV micromatchCryostat 2/micromatch npmRed Hat Medium Fix reported
Express.js Open Redirect in malformed URLsCVE-2024-29041 · GHSA-RV95-896H-C2VC expressA-MQ Interconnect 1/qpid-dispatch npmRed Hat Medium Fix reported
Uncontrolled resource consumption in bracesCVE-2024-4068 · GHSA-GRV7-FG5C-XMJG bracesCryostat 2/braces npmRed Hat High Fix reported
Prototype pollution in matrix-js-sdk (part 2)CVE-2023-28427 · GHSA-MWQ8-FJPF-C2GR matrix-js-sdkRed Hat Enterprise Linux 6/thunderbird npmRed Hat High Fix reported
Some AES functions may panic when overflow checking is enabled in ringCVE-2025-4432 · GHSA-4P46-PWFR-66X6 ringRed Hat Enterprise Linux 10/firefox Rust / CargoRed Hat Medium Fix reported
Elliptic's verify function omits uniqueness validationCVE-2024-48949 · GHSA-434G-2637-QMQR ellipticOpenShift Pipelines/openshift-pipelines/pipelines-hub-api-rhel8 npmRed Hat Low Fix reported
Elliptic allows BER-encoded signaturesCVE-2024-42461 · GHSA-49Q7-C7J4-3P7M ellipticOpenShift Pipelines/openshift-pipelines/pipelines-hub-api-rhel8 npmRed Hat Low Fix reported
Elliptic's ECDSA missing check for whether leading bit of r and s is zeroCVE-2024-42460 · GHSA-977X-G7H5-7QGW ellipticOpenShift Pipelines/openshift-pipelines/pipelines-hub-ui-rhel8 npmRed Hat Low Fix reported