Red Hat Openshift Data Foundation 4/odf4/mcg-core-rhel8

Red Hat · Package

8 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
lodash vulnerable to prototype pollution via array-path bypass in `_.unset`, `_.omit`, and `_.pullAtCVE-2026-2950 · GHSA-F23M-R3PF-42RH	lodash-amd lodash-es	npmRed Hat	Medium	Fix reported	2026-11-03
fast-xml-parser XMLBuilder: XML Comment and CDATA Injection via Unescaped DelimitersCVE-2026-41650 · GHSA-GH4J-GQV2-49F6	fast-xml-parser Cryostat 4/cryostat-openshift-console-plugin-npm	npmRed Hat	Medium	Fix reported	2026-09-10
yauzl contains an off-by-one errorCVE-2026-31988 · GHSA-GMQ8-994R-JV83	yauzl Cryostat 4/cryostat-openshift-console-plugin-npm	npmRed Hat	Medium	Fix reported	2026-09-10
uuid: Missing buffer bounds check in v3/v5/v6 when buf is providedCVE-2026-41907 · GHSA-W5HQ-G745-H8PQ	uuid Confidential Compute Attestation/openshift-sandboxed-containers/osc-pccs	npmRed Hat	Medium	Fix reported	2026-05-21
Command Injection in node-dfCVE-2019-15597 · GHSA-WP7M-MRVF-599C	node-df Red Hat Openshift Container Storage 4/ocs4/mcg-core-rhel8	npmRed Hat	Critical	No fix reported	2023-11-08
rapidjson: pivilege escalation via integer overflow in GenericReader::ParseNumber()CVE-2024-39684	Red Hat OpenStack Platform 17.1/leatherman Red Hat Openshift Data Foundation 4/odf4/mcg-core-rhel8	Red Hat	Medium	No fix reported	Not recorded
IBM QRadar Suite: IBM Cloud Pak for Security: Sensitive Information Disclosure in IBM QRadar Suite and IBM Cloud Pak for SecurityCVE-2024-22336	Red Hat Openshift Data Foundation 4/odf4/mcg-core-rhel8	Red Hat	Medium	No fix reported	Not recorded
uuid: uuid: Unexpected data writes when using external output buffers with specific UUID versionsCVE-2026-41988	Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9 Confidential Cluster Operator/confidential-clusters-beta/buildroot-rhel9	Red Hat	Low	No fix reported	Not recorded