Security
فارسی
All products

Red Hat Enterprise Linux 7/thunderbird

Red Hat · Package
762 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
AngularJS improperly sanitizes SVG elementsCVE-2025-0716 · GHSA-J58C-WW9W-PWP5 angularLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 npmRed Hat Low No fix reported
form-data uses unsafe random function in form-data for choosing boundaryCVE-2025-7783 · GHSA-FJXV-7RQG-78G4 form-dataLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 npmRed Hat Critical Fix reported
Formidable relies on hexoid to prevent guessing of filenames for untrusted executable contentCVE-2025-46653 · GHSA-75V8-2H7P-7M2M formidableOpenShift Serverless/openshift-serverless-1/kn-backstage-plugins-eventmesh-rhel8 npmRed Hat Low Fix reported
path-to-regexp contains a ReDoSCVE-2024-52798 · GHSA-RHX6-C78J-4Q9W path-to-regexpLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 npmRed Hat High Fix reported
cipher-base is missing type checks, leading to hash rewind and passing on crafted dataCVE-2025-9287 · GHSA-CPQ7-6GPM-G9RC cipher-baseLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 npmRed Hat Critical Fix reported
brace-expansion Regular Expression Denial of Service vulnerabilityCVE-2025-5889 · GHSA-V6H2-P8H4-QCJW brace-expansionCryostat 4/io.cryostat-cryostat npmRed Hat Low Fix reported
`idna` accepts Punycode labels that do not produce any non-ASCII when decodedCVE-2024-12224 · GHSA-H97M-WW89-6JMQVersion ranges need review. idnaOpenShift Serverless/openshift-serverless-1/kn-plugin-func-func-util-rhel8 Rust / CargoRed Hat Medium Fix reported
ReDoS vulnerability in vue package that is exploitable through inefficient regex evaluation in the parseHTML functionCVE-2024-9506 · GHSA-5J4C-8P2G-V4JX vueRed Hat Enterprise Linux 10/cldr-emoji-annotation npmRed Hat Low Fix reported
send vulnerable to template injection that can lead to XSSCVE-2024-43799 · GHSA-M6FV-JMCG-4JFG sendCryostat 3/send npmRed Hat Low Fix reported
serve-static vulnerable to template injection that can lead to XSSCVE-2024-43800 · GHSA-CM22-4G7W-348P serve-staticCryostat 3/serve-static npmRed Hat Low Fix reported
express vulnerable to XSS via response.redirect()CVE-2024-43796 · GHSA-QW6H-VGH9-J6WX expressCryostat 3/express npmRed Hat Low Fix reported
body-parser vulnerable to denial of service when url encoding is enabledCVE-2024-45590 · GHSA-QWCR-R2FM-QRC7 body-parserCryostat 3/body-parser npmRed Hat High Fix reported
Webpack's AutoPublicPathRuntimeModule has a DOM Clobbering Gadget that leads to XSSCVE-2024-43788 · GHSA-4VVJ-4CPR-P986 webpackLogging Subsystem for Red Hat OpenShift/openshift-logging/logging-view-plugin-rhel8 npmRed Hat Medium Fix reported
Regular Expression Denial of Service (ReDoS) in micromatchCVE-2024-4067 · GHSA-952P-6RRQ-RCJV micromatchCryostat 2/micromatch npmRed Hat Medium Fix reported
Express.js Open Redirect in malformed URLsCVE-2024-29041 · GHSA-RV95-896H-C2VC expressA-MQ Interconnect 1/qpid-dispatch npmRed Hat Medium Fix reported
Uncontrolled resource consumption in bracesCVE-2024-4068 · GHSA-GRV7-FG5C-XMJG bracesCryostat 2/braces npmRed Hat High Fix reported
PostCSS line return parsing errorCVE-2023-44270 · GHSA-7FH5-64P2-3V2J postcssCryostat 3/io.cryostat-cryostat3 npmRed Hat Medium Fix reported
PYSEC-2025-227CVE-2025-2368 · PYSEC-2025-227 wabt-binRed Hat Enterprise Linux 7/firefox PyPIRed Hat High No fix reported
Some AES functions may panic when overflow checking is enabled in ringCVE-2025-4432 · GHSA-4P46-PWFR-66X6 ringRed Hat Enterprise Linux 10/firefox Rust / CargoRed Hat Medium Fix reported
Elliptic's verify function omits uniqueness validationCVE-2024-48949 · GHSA-434G-2637-QMQR ellipticOpenShift Pipelines/openshift-pipelines/pipelines-hub-api-rhel8 npmRed Hat Low Fix reported