Security
فارسی
All products

Red Hat Enterprise Linux 7/subscription-manager

Red Hat · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
minimatch has potential denial of service via globparts amplificationCVE-2026-118764 · GHSA-G3HV-75WG-M249 minimatchCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat Medium Fix reported
Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversalCVE-2026-118773 · GHSA-3G3M-2FJR-6PW4 globCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat Medium Fix reported
brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustionCVE-2026-102278 · GHSA-QHR7-859C-M2P7 brace-expansionCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat High Fix reported
moment vulnerable to Path Traversal via crafted non-string locale nameCVE-2026-17495 · GHSA-4P3W-J4W9-5JQW momentMulticluster Engine for Kubernetes/multicluster-engine/console-mce-rhel9 npmRed Hat Medium Fix reported
brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of serviceCVE-2026-102277 · GHSA-Q2HR-2G5M-VWHR brace-expansionCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat Medium Fix reported
brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustionCVE-2026-102276 · GHSA-6J4F-FJ2G-MC7P brace-expansionCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat High Fix reported
qs array-limit bypass via bracket-key comma parsingCVE-2026-82562 · GHSA-X5FP-WJ9C-MXMX qsAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-ui-rhel9 npmRed Hat Medium Fix reported
PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unsetCVE-2026-69153 · GHSA-FXQJ-RQCC-2CMP postcssCryostat 4/cryostat-openshift-console-plugin-npm npmRed Hat Medium Fix reported
postcss-selector-parser allows denial of service through uncontrolled AST recursionCVE-2026-9358 · GHSA-W9M9-85WC-3X92 postcss-selector-parserCryostat 4/cryostat-openshift-console-plugin-npm npmRed Hat Low Fix reported
UAParser.js: Unbounded `Sec-CH-UA-Model` parsing can trigger ReDoS in `withClientHints()`CVE-2026-48125 · GHSA-9H5V-PFQQ-X599 ua-parser-jsGatekeeper 3/gatekeeper/gatekeeper-rhel9 npmRed Hat Medium Fix reported