Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat JBoss Enterprise Application Platform 7/jboss-eap-runtime-maven-repository.zip
Red Hat
· Package
13 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
minimatch has potential denial of service via globparts amplification
CVE-2026-118764 · GHSA-G3HV-75WG-M249
minimatch
Cost Management On Premise/costmanagement/costmanagement-ui-rhel10
npm
Red Hat
Medium
Fix reported
2026-11-04
Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal
CVE-2026-118773 · GHSA-3G3M-2FJR-6PW4
glob
Cost Management On Premise/costmanagement/costmanagement-ui-rhel10
npm
Red Hat
Medium
Fix reported
2026-10-31
brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion
CVE-2026-102278 · GHSA-QHR7-859C-M2P7
brace-expansion
Cost Management On Premise/costmanagement/costmanagement-ui-rhel10
npm
Red Hat
High
Fix reported
2026-09-30
moment vulnerable to Path Traversal via crafted non-string locale name
CVE-2026-17495 · GHSA-4P3W-J4W9-5JQW
moment
Multicluster Engine for Kubernetes/multicluster-engine/console-mce-rhel9
npm
Red Hat
Medium
Fix reported
2026-09-30
brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service
CVE-2026-102277 · GHSA-Q2HR-2G5M-VWHR
brace-expansion
Cost Management On Premise/costmanagement/costmanagement-ui-rhel10
npm
Red Hat
Medium
Fix reported
2026-09-30
brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion
CVE-2026-102276 · GHSA-6J4F-FJ2G-MC7P
brace-expansion
Cost Management On Premise/costmanagement/costmanagement-ui-rhel10
npm
Red Hat
High
Fix reported
2026-09-30
Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats)
CVE-2026-73088 · GHSA-73WF-GQ98-2V4G
browserslist
Node HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9
npm
Red Hat
High
Fix reported
2026-09-10
qs: Denial of Service via Attacker Controlled isBuffer
CVE-2026-82417 · GHSA-4MJR-XMP4-GH2G
qs
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-ui-rhel9
npm
Red Hat
Medium
Fix reported
2026-09-10
node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection
CVE-2026-73566 · GHSA-R292-9MHP-454M
tar
Exploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9
npm
Red Hat
High
Fix reported
2026-09-10
qs array-limit bypass via bracket-key comma parsing
CVE-2026-82562 · GHSA-X5FP-WJ9C-MXMX
qs
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-ui-rhel9
npm
Red Hat
Medium
Fix reported
2026-09-10
PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure
CVE-2026-73646 · GHSA-R28C-9Q8G-F849
postcss
Node HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9
npm
Red Hat
High
Fix reported
2026-09-10
http-cache-semantics: http-cache-semantics: Information Disclosure via max-stale directive
CVE-2026-93748
Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9
Red Hat AMQ Broker 7/amq-broker-maven-repository.zip
Red Hat
High
No fix reported
Not recorded
http-cache-semantics: http-cache-semantics: Information disclosure via improper Vary header wildcard validation
CVE-2026-93750
Confidential Compute Attestation/build-of-trustee/trustee-rhel9
Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9
Red Hat
Medium
No fix reported
Not recorded
