Security
فارسی
All products

Node HealthCheck Operator/workload-availability/node-remediation-console-rhel9

Red Hat · Package
30 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Lodash has Prototype Pollution Vulnerability in `_.unset`, `_.omit`, and `_.pullAt` functionsCVE-2025-13465 · GHSA-XXJR-MMJV-4GPG lodash-amdlodash-es npmRed Hat Medium Fix reported
lodash vulnerable to prototype pollution via array-path bypass in `_.unset`, `_.omit`, and `_.pullAtCVE-2026-2950 · GHSA-F23M-R3PF-42RH lodash-amdlodash-es npmRed Hat Medium Fix reported
deepmerge mergeObject() allows prototype poisoning of returned objectsCVE-2026-93753 · GHSA-GCQX-W48M-W2H4 deepmergeCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat Low No fix reported
Infinite loop on invalid input in golang.org/x/textCVE-2026-56852 · GO-2026-5970 golang.org/x/textAWS Load Balancer Operator/albo/aws-load-balancer-rhel9-operator GoRed Hat High Fix reported
Immutable.js `List` 32-bit trie overflow → unrecoverable DoSCVE-2026-59879 · GHSA-V56Q-MH7H-F735 immutableLogging Subsystem for Red Hat OpenShift/openshift-logging/logging-view-plugin-rhel9 npmRed Hat High Fix reported
linkify-it: Quadratic-complexity DoS via the `mailto:` validator scan-loop on attacker textCVE-2026-59887 · GHSA-V245-V573-V5VM linkify-itNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat High Fix reported
js-yaml: Exponential parsing time in flow collections leads to denial of serviceCVE-2026-73643 · GHSA-PM4M-PH32-GHV5 js-yamlNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat High Fix reported
LinkifyIt#match scan loop has quadratic algorithmic complexityCVE-2026-48801 · GHSA-22P9-WV53-3RQ4 linkify-itMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-console-plugin-rhel9 npmRed Hat High Fix reported
brace-expansion: Zero-step sequence causes process hang and memory exhaustionCVE-2026-33750 · GHSA-F886-M6HF-6M8V brace-expansionCryostat 4/brace-expansion npmRed Hat Medium Fix reported
Picomatch has a ReDoS vulnerability via extglob quantifiersCVE-2026-33671 · GHSA-C2C7-RCM5-VVQJ picomatchCryostat 4/picomatch npmRed Hat High Fix reported
js-yaml has prototype pollution in merge (<<)CVE-2025-64718 · GHSA-MH29-5H37-FV8M js-yamlCryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9 npmRed Hat Medium Fix reported
JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliasesCVE-2026-53550 · GHSA-H67P-54HQ-RP68 js-yamlCryostat 4/cryostat-openshift-console-plugin-npm npmRed Hat Medium Fix reported
Immutable is vulnerable to Prototype PollutionCVE-2026-29063 · GHSA-WF6X-7X77-MVGW immutableLogging Subsystem for Red Hat OpenShift/openshift-logging/logging-view-plugin-rhel9 npmRed Hat High Fix reported
DOMPurify contains a Cross-site Scripting vulnerabilityCVE-2026-0540 · GHSA-V2WJ-7WPQ-C8VV dompurifyCryostat 4/io.cryostat-cryostat npmRed Hat Medium Fix reported
DOMPurify contains a Cross-site Scripting vulnerabilityCVE-2025-15599 · GHSA-V8JM-5VWX-CFXM dompurifyCryostat 4/io.cryostat-cryostat npmRed Hat Medium Fix reported
Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objectsCVE-2026-34043 · GHSA-QJ8W-GFJ5-8C6V serialize-javascriptCryostat 4/cryostat-openshift-console-plugin-npm npmRed Hat Medium Fix reported
Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob MatchingCVE-2026-33672 · GHSA-3V7F-55P6-F55P picomatchCryostat 4/picomatch npmRed Hat Medium Fix reported
webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behaviorCVE-2025-68458 · GHSA-8FGC-7CC6-RX7X webpackCryostat 4/io.cryostat-cryostat npmRed Hat Low Fix reported
ajv has ReDoS when using `$data` optionCVE-2025-69873 · GHSA-2G4F-4PWH-QVX6 ajvConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs npmRed Hat Medium Fix reported
webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects → SSRF + cache persistenceCVE-2025-68157 · GHSA-38R7-794H-5758 webpackCryostat 4/io.cryostat-cryostat npmRed Hat Low Fix reported