Security
فارسی
All products

Red Hat 3scale API Management Platform 2/3scale-amp2/toolbox-rhel8

Red Hat · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=`CVE-2026-57435 · GHSA-PHWJ-RPRQ-35PP Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7 Red HatRubyGems Low Fix reported
Nokogiri: Possible Use-After-Free in XInclude ProcessingCVE-2026-57438 · GHSA-WFPW-MMFH-QQ69 Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7 Red HatRubyGems Low Fix reported
Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetimeCVE-2026-57437 · GHSA-P67V-3W7G-WJG7 Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7 Red HatRubyGems Low Fix reported
Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]`CVE-2026-57235 · GHSA-5PRR-V3J2-97MH Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7 Red HatRubyGems Medium Fix reported
Addressable has a Regular Expression Denial of Service in Addressable templatesCVE-2026-35611 · GHSA-H27X-RFFW-24P4 Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8 Red HatRubyGems High Fix reported
REXML denial of service vulnerabilityCVE-2024-43398 · GHSA-VMWR-MC7X-5VC3 Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7 Red HatRubyGems High Fix reported
Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node typeCVE-2026-57436 · GHSA-WJV4-X9W8-WM3H Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7 Red HatRubyGems Low Fix reported
Concurrent Ruby: `ReentrantReadWriteLock` read-count overflow grants a write lock without exclusivityCVE-2026-54905 · GHSA-WV3X-4VXV-WHPP Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7 Red HatRubyGems Low Fix reported
Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classesCVE-2026-57434 · GHSA-9CV2-CFXC-V4V2 Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7 Red HatRubyGems Low Fix reported
REXML has DoS condition when parsing malformed XML fileCVE-2025-58767 · GHSA-C2F4-JGMC-Q2R5 Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-operator-bundleLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel9-operator Red HatRubyGems Low Fix reported
REXML DoS vulnerabilityCVE-2024-41123 · GHSA-R55C-59QM-VJW6 Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7 Red HatRubyGems Medium Fix reported
REXML denial of service vulnerabilityCVE-2024-39908 · GHSA-4XQQ-M2HX-25V8 Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7 Red HatRubyGems Medium Fix reported
Possible XSS Security Vulnerability in SafeBuffer#bytespliceCVE-2023-28120 · GHSA-PJ73-V5MW-PM9J Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/toolbox-rhel8 Red HatRubyGems Medium Fix reported