Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Migration Toolkit for Applications 8/mta/mta-nodejs-external-provider-rhel9
Red Hat
· Package
8 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
minimatch has potential denial of service via globparts amplification
CVE-2026-118764 · GHSA-G3HV-75WG-M249
minimatch
Cost Management On Premise/costmanagement/costmanagement-ui-rhel10
npm
Red Hat
Medium
Fix reported
2026-11-04
Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal
CVE-2026-118773 · GHSA-3G3M-2FJR-6PW4
glob
Cost Management On Premise/costmanagement/costmanagement-ui-rhel10
npm
Red Hat
Medium
Fix reported
2026-10-31
brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion
CVE-2026-102278 · GHSA-QHR7-859C-M2P7
brace-expansion
Cost Management On Premise/costmanagement/costmanagement-ui-rhel10
npm
Red Hat
High
Fix reported
2026-09-30
brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service
CVE-2026-102277 · GHSA-Q2HR-2G5M-VWHR
brace-expansion
Cost Management On Premise/costmanagement/costmanagement-ui-rhel10
npm
Red Hat
Medium
Fix reported
2026-09-30
brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion
CVE-2026-102276 · GHSA-6J4F-FJ2G-MC7P
brace-expansion
Cost Management On Premise/costmanagement/costmanagement-ui-rhel10
npm
Red Hat
High
Fix reported
2026-09-30
brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation
CVE-2026-69152 · GHSA-RGW5-RVV9-X895
brace-expansion
Cryostat 4/grafana-infinity-datasource-npm
npm
Red Hat
High
Fix reported
2026-09-10
node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection
CVE-2026-73566 · GHSA-R292-9MHP-454M
tar
Cryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9
npm
Red Hat
High
Fix reported
2026-09-10
http-cache-semantics: http-cache-semantics: Information disclosure via improper Vary header wildcard validation
CVE-2026-93750
Confidential Compute Attestation/build-of-trustee/trustee-rhel9
Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9
Red Hat
Medium
No fix reported
Not recorded
