Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Enterprise Linux 8/cockpit-composer
Red Hat
· Package
13 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Bootstrap Vulnerable to Cross-Site Scripting in its Popover and Tooltip Components
CVE-2025-1647 · GHSA-Q58R-HWC8-RM9J
bootstrap
Red Hat Ceph Storage 4/ceph
npm
Red Hat
Medium
No fix reported
2026-10-09
Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats)
CVE-2026-73088 · GHSA-73WF-GQ98-2V4G
browserslist
Node HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9
npm
Red Hat
High
Fix reported
2026-09-10
React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretation
CVE-2026-40181 · GHSA-2J2X-HQR9-3H42
@remix-run/router
react-router
npm
Red Hat
Medium
Fix reported
2026-09-10
Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM
CVE-2026-73089 · GHSA-C83G-RGW3-J3CX
browserslist
Node HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9
npm
Red Hat
High
Fix reported
2026-09-10
React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR Hydration
CVE-2026-53666 · GHSA-337J-9HXR-RHXG
react-router
Cryostat 4/cryostat-openshift-console-plugin-npm
npm
Red Hat
Medium
Fix reported
2026-09-10
form-data: CRLF injection in form-data via unescaped multipart field names and filenames
CVE-2026-12143 · GHSA-HMW2-7CC7-3QXX
form-data
Network Observability Operator/network-observability/network-observability-console-plugin-pf4-rhel9
npm
Red Hat
High
Fix reported
2026-09-10
React Router vulnerable to DoS via unbounded path expansion in __manifest endpoint
CVE-2026-42342 · GHSA-8X6R-G9MW-2R78
@remix-run/server-runtime
react-router
npm
Red Hat
High
Fix reported
2026-09-10
Bootstrap Cross-Site Scripting (XSS) vulnerability for data-* attributes
CVE-2024-6485 · GHSA-VXMC-5X29-H64V
bootstrap
Red Hat AMQ Broker 7/bootstrap
npm
Red Hat
Medium
No fix reported
2026-09-10
React Router has stored XSS via unescaped Location header in prerendered redirect HTML
CVE-2026-33244 · GHSA-F22V-GFQF-P8F3
react-router
Cryostat 4/cryostat-openshift-console-plugin-npm
npm
Red Hat
Medium
Fix reported
2026-09-08
React Router vulnerable to XSS in unstable RSC redirect handling via javascript: redirect targets
CVE-2026-33245 · GHSA-8646-J5J9-6R62
react-router
Exploit Intelligence/exploit-intelligence-tech-preview/agent-client-rhel9
npm
Red Hat
High
Fix reported
2026-06-04
uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided
CVE-2026-41907 · GHSA-W5HQ-G745-H8PQ
uuid
Confidential Compute Attestation/openshift-sandboxed-containers/osc-pccs
npm
Red Hat
Medium
Fix reported
2026-05-21
node-fetch forwards secure headers to untrusted sites
CVE-2022-0235 · GHSA-R683-J2X4-V87G
node-fetch
.NET Core 3.1 on Red Hat Enterprise Linux/rh-dotnet31-dotnet
npm
Red Hat
High
Fix reported
2023-11-30
uuid: uuid: Unexpected data writes when using external output buffers with specific UUID versions
CVE-2026-41988
Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9
Confidential Cluster Operator/confidential-clusters-beta/buildroot-rhel9
Red Hat
Low
No fix reported
Not recorded
