All products

Red Hat Enterprise Linux 8/nodejs:24/nodejs-nodemon

Red Hat · Package
7 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
minimatch has potential denial of service via globparts amplificationCVE-2026-118764 · GHSA-G3HV-75WG-M249 minimatchCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat Medium Fix reported
brace-expansion: Zero-step sequence causes process hang and memory exhaustionCVE-2026-33750 · GHSA-F886-M6HF-6M8V brace-expansionCryostat 4/brace-expansion npmRed Hat Medium Fix reported
Picomatch has a ReDoS vulnerability via extglob quantifiersCVE-2026-33671 · GHSA-C2C7-RCM5-VVQJ picomatchCryostat 4/picomatch npmRed Hat High Fix reported
minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressionsCVE-2026-27904 · GHSA-23C5-XMQV-RM74 minimatchLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-operator-bundle npmRed Hat High Fix reported
Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob MatchingCVE-2026-33672 · GHSA-3V7F-55P6-F55P picomatchCryostat 4/picomatch npmRed Hat Medium Fix reported
minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segmentsCVE-2026-27903 · GHSA-7R86-CG39-JMMJ minimatchCryostat 4/io.cryostat-cryostat npmRed Hat High Fix reported
@isaacs/brace-expansion has Uncontrolled Resource ConsumptionCVE-2026-25547 · GHSA-7H2J-956F-4VF2 @isaacs/brace-expansionCryostat 4/io.cryostat-cryostat npmRed Hat High Fix reported