Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Openshift Data Foundation 4/rhceph-dev/odf4-odf-multicluster-console-rhel9
Red Hat
· Package
14 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
source-map-js allows event-loop denial of service through indexed source-map section offsets
CVE-2026-93749 · GHSA-68FV-2MGG-JV7Q
source-map-js
Node HealthCheck Operator/redhat-user-workloads/nhc-bundle-0-9
npm
Red Hat
High
Fix reported
2026-10-06
brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion
CVE-2026-102276 · GHSA-6J4F-FJ2G-MC7P
brace-expansion
Cost Management On Premise/costmanagement/costmanagement-ui-rhel10
npm
Red Hat
High
Fix reported
2026-09-30
undici vulnerable to Denial of Service via unrequested WebSocket subprotocol
CVE-2026-19534 · GHSA-RFGV-XXQX-MFG5
undici
Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9
npm
Red Hat
High
Fix reported
2026-09-29
fast-uri vulnerable to authority injection via an unvalidated port in serialize
CVE-2026-84292 · GHSA-QW65-CVWX-89V3
fast-uri
OpenShift Lightspeed/openshift-lightspeed/lightspeed-agentic-console-rhel9
npm
Red Hat
High
Fix reported
2026-09-29
fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references
CVE-2026-75931 · GHSA-5JGF-P345-68V8
fast-uri
OpenShift Lightspeed/openshift-lightspeed/lightspeed-agentic-console-rhel9
npm
Red Hat
High
Fix reported
2026-09-10
DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS
CVE-2026-75838 · GHSA-55Q2-FJHQ-7XH7
dompurify
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-ui-rhel9
npm
Red Hat
Medium
Fix reported
2026-09-10
brace-expansion: Large numeric range defeats documented `max` DoS protection
CVE-2026-45149 · GHSA-JXXR-4GWJ-5JF2
brace-expansion
Confidential Compute Attestation/openshift-sandboxed-containers/osc-pccs
npm
Red Hat
Medium
Fix reported
2026-09-10
React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretation
CVE-2026-40181 · GHSA-2J2X-HQR9-3H42
@remix-run/router
react-router
npm
Red Hat
Medium
Fix reported
2026-09-10
fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding
CVE-2026-75899 · GHSA-FPH4-WMHF-6FWF
fast-uri
OpenShift Lightspeed/openshift-lightspeed/lightspeed-agentic-console-rhel9
npm
Red Hat
High
Fix reported
2026-09-10
React Router has stored XSS via unescaped Location header in prerendered redirect HTML
CVE-2026-33244 · GHSA-F22V-GFQF-P8F3
react-router
Cryostat 4/cryostat-openshift-console-plugin-npm
npm
Red Hat
Medium
Fix reported
2026-09-08
gettext-converter: Prototype pollution in js2i18next() via crafted translation keys
CVE-2026-55451 · GHSA-F4JP-RW7W-CCWG
gettext-converter
Red Hat Openshift Data Foundation 4/odf4/ocs-client-console-rhel9
npm
Red Hat
Medium
Fix reported
2026-08-20
React Router vulnerable to Denial of Service via reflected user input in single-fetch
CVE-2026-34077 · GHSA-RXV8-25V2-QMQ8
react-router
turbo-stream
npm
Red Hat
High
Fix reported
2026-06-04
React Router vulnerable to XSS in unstable RSC redirect handling via javascript: redirect targets
CVE-2026-33245 · GHSA-8646-J5J9-6R62
react-router
Exploit Intelligence/exploit-intelligence-tech-preview/agent-client-rhel9
npm
Red Hat
High
Fix reported
2026-06-04
uri-js: uri-js: Denial of Service via malformed path segments
CVE-2026-93690
Cost Management On Premise/costmanagement/costmanagement-ui-rhel10
Multicluster Engine for Kubernetes/multicluster-engine/console-mce-rhel9
Red Hat
High
No fix reported
Not recorded
