Red Hat Openshift Data Foundation 4/odf4/odf-multicluster-console-rhel8

Red Hat · Package

6 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
lodash vulnerable to prototype pollution via array-path bypass in `_.unset`, `_.omit`, and `_.pullAtCVE-2026-2950 · GHSA-F23M-R3PF-42RH	lodash-amd lodash-es	npmRed Hat	Medium	Fix reported	2026-11-03
DOMPurify: Prototype Pollution to XSS Bypass via CUSTOM_ELEMENT_HANDLING FallbackCVE-2026-41238 · GHSA-V9JR-RG53-9PGP	dompurify Cryostat 4/cryostat-openshift-console-plugin-npm	npmRed Hat	Medium	Fix reported	2026-09-10
PostCSS has XSS via Unescaped </style> in its CSS Stringify OutputCVE-2026-41305 · GHSA-QX2V-QP2M-JG93	postcss Cryostat 4/cryostat-openshift-console-plugin-npm	npmRed Hat	Medium	Fix reported	2026-09-10
postcss-selector-parser allows denial of service through uncontrolled AST recursionCVE-2026-9358 · GHSA-W9M9-85WC-3X92	postcss-selector-parser Cryostat 4/cryostat-openshift-console-plugin-npm	npmRed Hat	Low	Fix reported	2026-09-10
DOMPurify: FORBID_TAGS bypassed by function-based ADD_TAGS predicate (asymmetry with FORBID_ATTR fix)CVE-2026-41240 · GHSA-H7MW-GPVR-XQ4M	dompurify Cryostat 4/cryostat-openshift-console-plugin-npm	npmRed Hat	Medium	Fix reported	2026-09-10
DOMPurify has a SAFE_FOR_TEMPLATES bypass in RETURN_DOM modeCVE-2026-41239 · GHSA-CRV5-9VWW-Q3G8	dompurify Cryostat 4/cryostat-openshift-console-plugin-npm	npmRed Hat	Medium	Fix reported	2026-09-10