Security
فارسی
All products

Red Hat Ceph Storage 5/ceph

Red Hat · Package
19 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Lodash has Prototype Pollution Vulnerability in `_.unset`, `_.omit`, and `_.pullAt` functionsCVE-2025-13465 · GHSA-XXJR-MMJV-4GPG lodash-amdlodash-es npmRed Hat Medium Fix reported
Bootstrap Vulnerable to Cross-Site Scripting in its Popover and Tooltip ComponentsCVE-2025-1647 · GHSA-Q58R-HWC8-RM9J bootstrapRed Hat Ceph Storage 4/ceph npmRed Hat Medium No fix reported
Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML AttributesCVE-2025-66412 · GHSA-V4HV-RGFQ-GP49 @angular/compilerLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 npmRed Hat High Fix reported
Angular is Vulnerable to XSRF Token Leakage via Protocol-Relative URLs in Angular HTTP ClientCVE-2025-66035 · GHSA-58C5-G7WP-6W37 @angular/commonLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 npmRed Hat High Fix reported
Bootstrap Cross-Site Scripting (XSS) vulnerability for data-* attributesCVE-2024-6485 · GHSA-VXMC-5X29-H64V bootstrapRed Hat AMQ Broker 7/bootstrap npmRed Hat Medium No fix reported
Moment.js vulnerable to Inefficient Regular Expression ComplexityCVE-2022-31129 · GHSA-WC69-RHJR-HC9G momentmoment.js npmNuGetRed Hat High Fix reported
Angular vulnerable to Cross-site ScriptingCVE-2021-4231 · GHSA-C75V-2VQ8-878F @angular/core.NET Core 3.1 on Red Hat Enterprise Linux/rh-dotnet31-dotnet npmRed Hat Medium Fix reported
Inefficient Regular Expression Complexity in chalk/ansi-regexCVE-2021-3807 · GHSA-93Q8-GQ69-WQMW ansi-regexMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed Hat High Fix reported
bootstrap Cross-site Scripting vulnerabilityCVE-2018-20677 · GHSA-PH58-4VRJ-W6HR twbs/bootstraporg.webjars:bootstrap ComposerMavennpmNuGetRed HatRubyGems Medium Fix reported
XSS vulnerability that affects bootstrapCVE-2018-20676 · GHSA-3MGP-FX93-9XV5 twbs/bootstraporg.webjars:bootstrap ComposerMavennpmNuGetRed HatRubyGems Medium Fix reported
Bootstrap Cross-site Scripting vulnerabilityCVE-2018-14041 · GHSA-PJ7M-G53M-7638Version ranges need review. twbs/bootstraptypo3/cms-core ComposerMavennpmNuGetRed HatRubyGems Medium Fix reported
lapack: Out-of-bounds read in *larrvCVE-2021-4048 Red Hat Ceph Storage 2/cephRed Hat Ceph Storage 3/ceph Red Hat Medium No fix reported
ceph: possible DoS issue in ceph URL processing on RGW backendsCVE-2022-3854 Red Hat Ceph Storage 3/cephRed Hat Ceph Storage 5/ceph Red Hat Medium No fix reported
ceph: rhceph-container: Authentication bypass in CEPH RadosGWCVE-2024-48916 Red Hat Ceph Storage 4/cephRed Hat Ceph Storage 4/rhceph/rhceph-4-rhel8 Red Hat High No fix reported
ceph: privilege escalation by unprivileged users in a ceph-fuse mounted CephFSCVE-2025-52555 Red Hat Ceph Storage 4/cephRed Hat Ceph Storage 5/ceph Red Hat Medium No fix reported
rgw: RGW DoS attack with empty HTTP header in S3 object copyCVE-2024-47866 Red Hat Ceph Storage 4/cephRed Hat Ceph Storage 5/ceph Red Hat High No fix reported
ceph: ceph: RGW STS session tokens vulnerable to CBC bit-flip attack enabling admin privilege escalationCVE-2026-39944 Red Hat Ceph Storage 4/cephRed Hat Ceph Storage 5/ceph Red Hat High No fix reported
ceph: ceph: RGW SigV4 verifier allows attachment of arbitrary unsigned x-amz-* headers leading to privilege escalationCVE-2026-54330 Red Hat Ceph Storage 4/cephRed Hat Ceph Storage 5/ceph Red Hat High No fix reported
ceph: ceph: MON subscription handler exposes config-key store to low-privilege CephX usersCVE-2026-50152 Red Hat Ceph Storage 4/cephRed Hat Ceph Storage 5/ceph Red Hat High No fix reported