Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Openshift Data Foundation 4/rhceph-dev/odf4-mcg-core-rhel9
Red Hat
· Package
10 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion
CVE-2026-102276 · GHSA-6J4F-FJ2G-MC7P
brace-expansion
Cost Management On Premise/costmanagement/costmanagement-ui-rhel10
npm
Red Hat
High
Fix reported
2026-09-30
undici vulnerable to Denial of Service via unrequested WebSocket subprotocol
CVE-2026-19534 · GHSA-RFGV-XXQX-MFG5
undici
Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9
npm
Red Hat
High
Fix reported
2026-09-29
fast-uri vulnerable to authority injection via an unvalidated port in serialize
CVE-2026-84292 · GHSA-QW65-CVWX-89V3
fast-uri
OpenShift Lightspeed/openshift-lightspeed/lightspeed-agentic-console-rhel9
npm
Red Hat
High
Fix reported
2026-09-29
fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority
CVE-2026-84394 · GHSA-58MR-GQGX-XQ4G
fast-uri
Cost Management On Premise/costmanagement/costmanagement-ui-rhel10
npm
Red Hat
High
Fix reported
2026-09-29
morgan vulnerable to Log Forging via unneutralized control characters in :remote-user
CVE-2026-5078 · GHSA-4VJ7-5MJ6-JM8M
morgan
Confidential Compute Attestation/openshift-sandboxed-containers/osc-pccs
npm
Red Hat
Medium
Fix reported
2026-09-10
brace-expansion: Large numeric range defeats documented `max` DoS protection
CVE-2026-45149 · GHSA-JXXR-4GWJ-5JF2
brace-expansion
Confidential Compute Attestation/openshift-sandboxed-containers/osc-pccs
npm
Red Hat
Medium
Fix reported
2026-09-10
fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding
CVE-2026-75899 · GHSA-FPH4-WMHF-6FWF
fast-uri
OpenShift Lightspeed/openshift-lightspeed/lightspeed-agentic-console-rhel9
npm
Red Hat
High
Fix reported
2026-09-10
fast-uri vulnerable to host confusion via percent-encoded authority delimiters
CVE-2026-6322 · GHSA-V39H-62P7-JPJC
fast-uri
Confidential Compute Attestation/openshift-sandboxed-containers/osc-pccs
npm
Red Hat
High
Fix reported
2026-09-10
noobaa-core: noobaa-core: Presigned PUT URL escalation to CopyObject via unsigned x-amz-copy-source header
CVE-2026-94368
Red Hat Openshift Data Foundation 4/odf4/mcg-core-rhel9
Red Hat Openshift Data Foundation 4/rhceph-dev/odf4-mcg-core-rhel9
Red Hat
High
No fix reported
Not recorded
noobaa-core: noobaa-core: OS command injection in cluster_internal_api.set_hostname_internal
CVE-2026-86330
Red Hat Openshift Data Foundation 4/odf4/mcg-core-rhel9
Red Hat Openshift Data Foundation 4/rhceph-dev/odf4-mcg-core-rhel9
Red Hat
High
No fix reported
Not recorded
