| Lodash has Prototype Pollution Vulnerability in `_.unset`, `_.omit`, and `_.pullAt` functionsCVE-2025-13465 · GHSA-XXJR-MMJV-4GPG |
lodash-amdlodash-es |
npmRed Hat |
Medium
|
Fix reported |
|
| lodash vulnerable to prototype pollution via array-path bypass in `_.unset`, `_.omit`, and `_.pullAtCVE-2026-2950 · GHSA-F23M-R3PF-42RH |
lodash-amdlodash-es |
npmRed Hat |
Medium
|
Fix reported |
|
| Bootstrap Vulnerable to Cross-Site Scripting in its Popover and Tooltip ComponentsCVE-2025-1647 · GHSA-Q58R-HWC8-RM9J |
bootstrapRed Hat Ceph Storage 4/ceph |
npmRed Hat |
Medium
|
No fix reported |
|
| moment vulnerable to Path Traversal via crafted non-string locale nameCVE-2026-17495 · GHSA-4P3W-J4W9-5JQW |
momentMulticluster Engine for Kubernetes/multicluster-engine/console-mce-rhel9 |
npmRed Hat |
Medium
|
Fix reported |
|
| Angular: Sanitization bypass via directive host bindings on concrete host elements in @angular/core and @angular/compilerCVE-2026-88057 · GHSA-HH8M-FM6V-7CVG |
@angular/compiler@angular/core |
npmRed Hat |
Medium
|
Fix reported |
|
| Angular is Vulnerable to XSRF Token Leakage via Protocol-Relative URLs in Angular HTTP ClientCVE-2025-66035 · GHSA-58C5-G7WP-6W37 |
@angular/commonLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 |
npmRed Hat |
High
|
Fix reported |
|
| Bootstrap Cross-Site Scripting (XSS) vulnerability for data-* attributesCVE-2024-6485 · GHSA-VXMC-5X29-H64V |
bootstrapRed Hat AMQ Broker 7/bootstrap |
npmRed Hat |
Medium
|
No fix reported |
|
| angular vulnerable to regular expression denial of service via the $resource serviceCVE-2023-26117 · GHSA-2QQX-W9HR-Q5GX |
angularOpenShift Service Mesh 2.1/servicemesh-grafana |
npmRed Hat |
Medium
|
No fix reported |
|
| Moment.js vulnerable to Inefficient Regular Expression ComplexityCVE-2022-31129 · GHSA-WC69-RHJR-HC9G |
momentmoment.js |
npmNuGetRed Hat |
High
|
Fix reported |
|
| Path Traversal: 'dir/../../filename' in moment.localeCVE-2022-24785 · GHSA-8HFJ-J24R-96C4 |
momentmoment.js |
npmNuGetRed Hat |
High
|
Fix reported |
|
| Angular vulnerable to Cross-site ScriptingCVE-2021-4231 · GHSA-C75V-2VQ8-878F |
@angular/core.NET Core 3.1 on Red Hat Enterprise Linux/rh-dotnet31-dotnet |
npmRed Hat |
Medium
|
Fix reported |
|
| Inefficient Regular Expression Complexity in chalk/ansi-regexCVE-2021-3807 · GHSA-93Q8-GQ69-WQMW |
ansi-regexMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 |
npmRed Hat |
High
|
Fix reported |
|
| bootstrap Cross-site Scripting vulnerabilityCVE-2018-20677 · GHSA-PH58-4VRJ-W6HR |
twbs/bootstraporg.webjars:bootstrap |
ComposerMavennpmNuGetRed HatRubyGems |
Medium
|
Fix reported |
|
| XSS vulnerability that affects bootstrapCVE-2018-20676 · GHSA-3MGP-FX93-9XV5 |
twbs/bootstraporg.webjars:bootstrap |
ComposerMavennpmNuGetRed HatRubyGems |
Medium
|
Fix reported |
|
| Angular i18n: Cross-Site Scripting (XSS) via event-handler attributesCVE-2026-69151 · GHSA-JJ27-H5HQ-8X99 |
@angular/compiler@angular/core |
npmRed Hat |
High
|
Fix reported |
|
| Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State PoisoningCVE-2026-68945 · GHSA-JHPW-976M-542J |
@angular/commonRed Hat Ceph Storage 4/ceph |
npmRed Hat |
High
|
Fix reported |
|
| Bootstrap Cross-site Scripting vulnerabilityCVE-2018-14041 · GHSA-PJ7M-G53M-7638Version ranges need review. |
twbs/bootstraptypo3/cms-core |
ComposerMavennpmNuGetRed HatRubyGems |
Medium
|
Fix reported |
|
| dpdk: possible memory leak leads to denial of serviceCVE-2019-14818 |
Fast Datapath for RHEL 7/openvswitch2.10Red Hat Ceph Storage 4/ceph |
Red Hat |
Medium
|
No fix reported |
|
| lua: segmentation fault in changedline in ldebug.cCVE-2020-15945 |
Red Hat Ceph Storage 3/cephRed Hat Ceph Storage 4/ceph |
Red Hat |
Medium
|
No fix reported |
|
| ceph: RGW unauthenticated denial of serviceCVE-2021-3531 |
Red Hat Ceph Storage 2/cephRed Hat Ceph Storage 3/ceph |
Red Hat |
Medium
|
No fix reported |
|
