Red Hat Enterprise Linux 8/container-tools:rhel8/cockpit-podman
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| lodash vulnerable to prototype pollution via array-path bypass in `_.unset`, `_.omit`, and `_.pullAt | lodash-amdlodash-es | npmRed Hat | Medium | Fix reported | |
| lodash vulnerable to Code Injection via `_.template` imports key names | lodash-amdlodash-es | npmRed Hat | High | Fix reported | |
| Bootstrap Vulnerable to Cross-Site Scripting in its Popover and Tooltip Components | bootstrapRed Hat Ceph Storage 4/ceph | npmRed Hat | Medium | No fix reported | |
| node-fetch forwards secure headers to untrusted sites | node-fetch.NET Core 3.1 on Red Hat Enterprise Linux/rh-dotnet31-dotnet | npmRed Hat | High | Fix reported |