Security
فارسی
All products

Red Hat Enterprise Linux 8/dotnet5.0-build-reference-packages

Red Hat · Package
16 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
@angular/platform-server: Open Redirect via Protocol-Relative URLs in Server-Side Rendering (SSR)CVE-2026-111754 · GHSA-W739-GVWX-GRC3 @angular/platform-serverRed Hat Enterprise Linux 8/dotnet5.0-build-reference-packages npmRed Hat Medium Fix reported
Bootstrap Vulnerable to Cross-Site Scripting in its Popover and Tooltip ComponentsCVE-2025-1647 · GHSA-Q58R-HWC8-RM9J bootstrapRed Hat Ceph Storage 4/ceph npmRed Hat Medium No fix reported
Angular: SSR XSS via Unescaped <template> Content Across DocumentFragment Boundaries in Fallback Raw-Content ElementsCVE-2026-88060 · GHSA-V3P8-WHQ6-R5JG @angular/platform-serverRed Hat Enterprise Linux 8/dotnet5.0-build-reference-packages npmRed Hat High Fix reported
React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)CVE-2026-53669 · GHSA-WRJC-X8RR-H8H6 react-routerCryostat 4/cryostat-openshift-console-plugin-npm npmRed Hat Medium Fix reported
node-tar: Process crash via PAX numeric path type confusionCVE-2026-59871 · GHSA-W8WR-V893-VJVP tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs npmRed Hat Medium Fix reported
adm-zip: Crafted ZIP file triggers 4GB memory allocationCVE-2026-39244 · GHSA-XCPC-8H2W-3J85 adm-zipRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/volsync-operator-bundle npmRed Hat High Fix reported
React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretationCVE-2026-40181 · GHSA-2J2X-HQR9-3H42 @remix-run/routerreact-router npmRed Hat Medium Fix reported
qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is setCVE-2026-8723 · GHSA-Q8MJ-M7CP-5Q26 qsConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs npmRed Hat Medium Fix reported
body-parser vulnerable to denial of service when invalid limit value silently disables size enforcementCVE-2026-12590 · GHSA-V422-HMWV-36X6 body-parserConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs npmRed Hat Low Fix reported
node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath recordsCVE-2026-59875 · GHSA-GVWX-54WH-QM9J tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs npmRed Hat Medium Fix reported
React Router vulnerable to DoS via unbounded path expansion in __manifest endpointCVE-2026-42342 · GHSA-8X6R-G9MW-2R78 @remix-run/server-runtimereact-router npmRed Hat High Fix reported
postcss-selector-parser allows denial of service through uncontrolled AST recursionCVE-2026-9358 · GHSA-W9M9-85WC-3X92 postcss-selector-parserCryostat 4/cryostat-openshift-console-plugin-npm npmRed Hat Low Fix reported
Bootstrap Cross-Site Scripting (XSS) vulnerability for data-* attributesCVE-2024-6485 · GHSA-VXMC-5X29-H64V bootstrapRed Hat AMQ Broker 7/bootstrap npmRed Hat Medium No fix reported
React Router has stored XSS via unescaped Location header in prerendered redirect HTMLCVE-2026-33244 · GHSA-F22V-GFQF-P8F3 react-routerCryostat 4/cryostat-openshift-console-plugin-npm npmRed Hat Medium Fix reported
React Router has unexpected external redirect via untrusted pathsCVE-2025-68470 · GHSA-9JCX-V3WJ-WH4M react-routerCryostat 4/io.cryostat-cryostat npmRed Hat Medium Fix reported
Angular SSR: Global Platform Injector Race Condition Leads to Cross-Request Data LeakageCVE-2025-59052 · GHSA-68X2-MX4Q-78M7 @angular/platform-server@angular/ssr npmRed Hat High Fix reported