Red Hat OpenShift GitOps/openshift-gitops-1/console-plugin-rhel9

Red Hat · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
lodash vulnerable to prototype pollution via array-path bypass in `_.unset`, `_.omit`, and `_.pullAtCVE-2026-2950 · GHSA-F23M-R3PF-42RH	lodash-amd lodash-es	npmRed Hat	Medium	Fix reported	2026-11-03
React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)CVE-2026-53669 · GHSA-WRJC-X8RR-H8H6	react-router Cryostat 4/cryostat-openshift-console-plugin-npm	npmRed Hat	Medium	Fix reported	2026-09-10
React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretationCVE-2026-40181 · GHSA-2J2X-HQR9-3H42	@remix-run/router react-router	npmRed Hat	Medium	Fix reported	2026-09-10
React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR HydrationCVE-2026-53666 · GHSA-337J-9HXR-RHXG	react-router Cryostat 4/cryostat-openshift-console-plugin-npm	npmRed Hat	Medium	Fix reported	2026-09-10
React Router has stored XSS via unescaped Location header in prerendered redirect HTMLCVE-2026-33244 · GHSA-F22V-GFQF-P8F3	react-router Cryostat 4/cryostat-openshift-console-plugin-npm	npmRed Hat	Medium	Fix reported	2026-09-08
React Router vulnerable to Denial of Service via reflected user input in single-fetchCVE-2026-34077 · GHSA-RXV8-25V2-QMQ8	react-router turbo-stream	npmRed Hat	High	Fix reported	2026-06-04
React Router vulnerable to XSS in unstable RSC redirect handling via javascript: redirect targetsCVE-2026-33245 · GHSA-8646-J5J9-6R62	react-router Exploit Intelligence/exploit-intelligence-tech-preview/agent-client-rhel9	npmRed Hat	High	Fix reported	2026-06-04