Security
فارسی
All products

Red Hat Enterprise Linux 9/ceph

Red Hat · Package
21 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Lodash has Prototype Pollution Vulnerability in `_.unset`, `_.omit`, and `_.pullAt` functionsCVE-2025-13465 · GHSA-XXJR-MMJV-4GPG lodash-amdlodash-es npmRed Hat Medium Fix reported
lodash vulnerable to prototype pollution via array-path bypass in `_.unset`, `_.omit`, and `_.pullAtCVE-2026-2950 · GHSA-F23M-R3PF-42RH lodash-amdlodash-es npmRed Hat Medium Fix reported
Google Guava: CompactHashMap/CompactHashSet/MapMakerInternalMap deserialization triggers uncontrolled memory allocationCVE-2026-102554 · GHSA-XXPH-C9WW-HJ94 com.google.guava:guavaExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 MavenRed Hat High Fix reported
lodash vulnerable to Code Injection via `_.template` imports key namesCVE-2026-4800 · GHSA-R5FR-RJXR-66JC lodash-amdlodash-es npmRed Hat High Fix reported
Bootstrap Vulnerable to Cross-Site Scripting in its Popover and Tooltip ComponentsCVE-2025-1647 · GHSA-Q58R-HWC8-RM9J bootstrapRed Hat Ceph Storage 4/ceph npmRed Hat Medium No fix reported
Angular: Sanitization bypass via directive host bindings on concrete host elements in @angular/core and @angular/compilerCVE-2026-88057 · GHSA-HH8M-FM6V-7CVG @angular/compiler@angular/core npmRed Hat Medium Fix reported
ws: Uninitialized memory disclosureCVE-2026-45736 · GHSA-58QX-3VCG-4XPX wsNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat Medium Fix reported
Angular i18n vulnerable to Cross-Site ScriptingCVE-2026-27970 · GHSA-PRJF-86W9-MFQV @angular/coreRed Hat Enterprise Linux 10/ceph npmRed Hat High Fix reported
ws: Memory exhaustion DoS from tiny fragments and data chunksCVE-2026-48779 · GHSA-96HV-2XVQ-FX4P wsNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat High Fix reported
Plexus-Utils has a Directory Traversal vulnerability in its extractFile method CVE-2025-67030 · GHSA-6FMV-XXPF-W3CW org.codehaus.plexus:plexus-utilsOpenShift Developer Tools and Services/jenkins-2-plugins MavenRed Hat High Fix reported
Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML AttributesCVE-2025-66412 · GHSA-V4HV-RGFQ-GP49 @angular/compilerLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 npmRed Hat High Fix reported
Angular is Vulnerable to XSRF Token Leakage via Protocol-Relative URLs in Angular HTTP ClientCVE-2025-66035 · GHSA-58C5-G7WP-6W37 @angular/commonLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 npmRed Hat High Fix reported
Bootstrap Cross-Site Scripting (XSS) vulnerability for data-* attributesCVE-2024-6485 · GHSA-VXMC-5X29-H64V bootstrapRed Hat AMQ Broker 7/bootstrap npmRed Hat Medium No fix reported
ws affected by a DoS when handling a request with many HTTP headersCVE-2024-37890 · GHSA-3H5V-Q93C-6H6Q ws.NET 6.0 on Red Hat Enterprise Linux/rh-dotnet60-dotnet npmRed Hat High Fix reported
Inefficient Regular Expression Complexity in markedCVE-2022-21680 · GHSA-RRRM-QJM4-V8HF markedOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat High Fix reported
Inefficient Regular Expression Complexity in markedCVE-2022-21681 · GHSA-5V2H-R2CX-5XGJ markedOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat High Fix reported
Angular i18n: Cross-Site Scripting (XSS) via event-handler attributesCVE-2026-69151 · GHSA-JJ27-H5HQ-8X99 @angular/compiler@angular/core npmRed Hat High Fix reported
Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State PoisoningCVE-2026-68945 · GHSA-JHPW-976M-542J @angular/commonRed Hat Ceph Storage 4/ceph npmRed Hat High Fix reported
Angular vulnerable to XSS in i18n attribute bindingsCVE-2026-32635 · GHSA-G93W-MFHG-P222 @angular/compiler@angular/core npmRed Hat High Fix reported
ceph: mgr modules' passwords are in clear text in mgr logsCVE-2020-25678 Red Hat Ceph Storage 2/cephRed Hat Enterprise Linux 9/ceph Red Hat Medium No fix reported