Security
فارسی
All products

OpenShift Pipelines/openshift-pipelines/pipelines-console-plugin-rhel9

Red Hat · Package
127 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
protobufjs has an arbitrary code execution issueCVE-2026-41242 · GHSA-XQ3M-2V4X-88GG protobufjsOpenShift Pipelines/openshift-pipelines/pipelines-console-plugin-rhel8 npmRed Hat Critical Fix reported
undici WebSocket client vulnerable to denial of service via fragment count bypassCVE-2026-12151 · GHSA-VXPW-J846-P89Q undiciOpenShift Pipelines/openshift-pipelines/pipelines-console-plugin-pf5-rhel9 npmRed Hat High Fix reported
lodash vulnerable to prototype pollution via array-path bypass in `_.unset`, `_.omit`, and `_.pullAtCVE-2026-2950 · GHSA-F23M-R3PF-42RH lodash-amdlodash-es npmRed Hat Medium Fix reported
lodash vulnerable to Code Injection via `_.template` imports key namesCVE-2026-4800 · GHSA-R5FR-RJXR-66JC lodash-amdlodash-es npmRed Hat High Fix reported
source-map-js allows event-loop denial of service through indexed source-map section offsetsCVE-2026-93749 · GHSA-68FV-2MGG-JV7Q source-map-jsNode HealthCheck Operator/redhat-user-workloads/nhc-bundle-0-9 npmRed Hat High Fix reported
compression vulnerable to Denial of Service via memory leak on premature response closeCVE-2026-87776 · GHSA-VC2V-76PW-4V95 compressionNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat High Fix reported
fast-uri vulnerable to inconsistent host case normalization via percent-encoded octetsCVE-2026-86472 · GHSA-HRR3-GC8F-F4QJ fast-uriCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat Medium Fix reported
undici vulnerable to Denial of Service via orphaned RetryHandler response bodyCVE-2026-18149 · GHSA-PMJH-FQ2X-6V4X undiciOpenShift Pipelines/openshift-pipelines/pipelines-console-plugin-pf5-rhel9 npmRed Hat Medium Fix reported
undici vulnerable to downstream response splitting via retry interceptorCVE-2026-18540 · GHSA-R53P-7PC4-XJ5R undiciExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 npmRed Hat Low Fix reported
undici vulnerable to Denial of Service via unrequested WebSocket subprotocolCVE-2026-19534 · GHSA-RFGV-XXQX-MFG5 undiciExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 npmRed Hat High Fix reported
undici vulnerable to Denial of Service via unbounded decompression of compressed responsesCVE-2026-84890 · GHSA-3XPG-4RPP-HHHM undiciExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 npmRed Hat Medium Fix reported
undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared cachesCVE-2026-84933 · GHSA-2JFJ-6HJV-FM6J undiciOpenShift Pipelines/openshift-pipelines/pipelines-console-plugin-pf5-rhel9 npmRed Hat Medium Fix reported
undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPoolCVE-2026-84961 · GHSA-W293-VG96-WGC3 undiciExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 npmRed Hat High Fix reported
undici vulnerable to cross-origin cache poisoning via missing origin isolation in interceptorsCVE-2026-85152 · GHSA-VP8M-P9JH-Q5PM undiciExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 npmRed Hat High Fix reported
undici vulnerable to caching and replay of unsafe HTTP method responsesCVE-2026-85008 · GHSA-8436-99HF-9MMV undiciExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 npmRed Hat Low Fix reported
undici vulnerable to response truncation via oversized chunked responses in the dump interceptorCVE-2026-84947 · GHSA-2GQQ-GQF2-X968 undiciExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 npmRed Hat Low Fix reported
undici vulnerable to Denial of Service via WebSocketStream unclean closeCVE-2026-85014 · GHSA-RX4F-C7P8-82VQ undiciExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 npmRed Hat Medium Fix reported
undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompressionCVE-2026-85024 · GHSA-3WWX-PV8P-Q78V undiciExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 npmRed Hat Medium Fix reported
fast-uri vulnerable to authority injection via an unvalidated port in serializeCVE-2026-84292 · GHSA-QW65-CVWX-89V3 fast-uriOpenShift Lightspeed/openshift-lightspeed/lightspeed-agentic-console-rhel9 npmRed Hat High Fix reported
fast-uri vulnerable to host confusion via an unclosed bracket in the URI authorityCVE-2026-84394 · GHSA-58MR-GQGX-XQ4G fast-uriCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat High Fix reported