Security
فارسی
All products

Red Hat OpenShift Container Platform 4/redhat-user-workloads/art-images

Red Hat · Package
14 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
protobufjs has an arbitrary code execution issueCVE-2026-41242 · GHSA-XQ3M-2V4X-88GG protobufjsOpenShift Pipelines/openshift-pipelines/pipelines-console-plugin-rhel8 npmRed Hat Critical Fix reported
JsBraceDepth Context Tracking Bugs (XSS) in html/templateCVE-2026-32289 · GO-2026-4865 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/redhat-user-workloads/appliance GoRed Hat Medium Fix reported
Unbounded allocation for old GNU sparse in archive/tarCVE-2026-32288 · GO-2026-4869 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/redhat-user-workloads/assisted-installer-ds-main GoRed Hat Medium Fix reported
Arbitrary inputs are included in errors without any escaping in net/textprotoCVE-2026-42507 · GO-2026-5039 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium Fix reported
ebpf-go is vulnerable to integer overflow via LoadCollectionSpecFromReaderCVE-2026-10722 · GHSA-XHGW-QWWF-PG32Version ranges need review. github.com/cilium/ebpfConfidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9 GoRed Hat Low Fix reported
brace-expansion: Large numeric range defeats documented `max` DoS protectionCVE-2026-45149 · GHSA-JXXR-4GWJ-5JF2 brace-expansionConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs npmRed Hat Medium Fix reported
Axios HTTP/2 Session Cleanup State Corruption VulnerabilityCVE-2026-39865 · GHSA-QJ83-CQ47-W5F8 axiosCryostat 4/axios npmRed Hat Medium Fix reported
React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretationCVE-2026-40181 · GHSA-2J2X-HQR9-3H42 @remix-run/routerreact-router npmRed Hat Medium Fix reported
@nestjs/core Improperly Neutralizes Special Elements in Output Used by a Downstream Component ('Injection')CVE-2026-35515 · GHSA-36XV-JGW5-4Q75 @nestjs/coreRed Hat Developer Hub 1/rhdh/backstage-community-plugin-catalog-backend-module-scaffolder-relation-processor npmRed Hat Medium Fix reported
Vite Vulnerable to Path Traversal in Optimized Deps `.map` HandlingCVE-2026-39365 · GHSA-4W7W-66W2-5VF9 viteRed Hat Advanced Cluster Security 4/rhacs-eng/release-main npmRed Hat Medium Fix reported
React Router has stored XSS via unescaped Location header in prerendered redirect HTMLCVE-2026-33244 · GHSA-F22V-GFQF-P8F3 react-routerCryostat 4/cryostat-openshift-console-plugin-npm npmRed Hat Medium Fix reported
React Router vulnerable to Denial of Service via reflected user input in single-fetchCVE-2026-34077 · GHSA-RXV8-25V2-QMQ8 react-routerturbo-stream npmRed Hat High Fix reported
React Router vulnerable to XSS in unstable RSC redirect handling via javascript: redirect targetsCVE-2026-33245 · GHSA-8646-J5J9-6R62 react-routerExploit Intelligence/exploit-intelligence-tech-preview/agent-client-rhel9 npmRed Hat High Fix reported
NetworkManager: NetworkManager: Local privilege escalation via malformed MUD URLs in dhclient backendCVE-2026-10805 Multicluster Engine for Kubernetes/multicluster-engine/cluster-api-provider-aws-rhel9Red Hat JBoss Enterprise Application Platform Expansion Pack/networkmanager Red Hat Medium No fix reported