Security
فارسی
All products

Red Hat Fuse 7/redhat-fuse-maven-repository.zip

Red Hat · Package
19 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Forge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDerCVE-2026-119191 · GHSA-RHR8-3PM8-CQ29 node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat High Fix reported
Forge: X.509 pathLenConstraint not enforced by verifyCertificateChain() for CA certificates without keyUsageCVE-2026-119189 · GHSA-H46V-RMH6-FQ4F node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat Medium Fix reported
Forge: Certificate signature verified with the issuer's RSA signature schemeCVE-2026-118774 · GHSA-9WG5-MJ3P-V49Q node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat Low Fix reported
Forge: Incomplete PKCS#7 padding validation in AES/DES CBC and ECB decryptionCVE-2026-118776 · GHSA-2VGQ-WCHC-25W7 node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat Low Fix reported
minimatch has potential denial of service via globparts amplificationCVE-2026-118764 · GHSA-G3HV-75WG-M249 minimatchCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat Medium Fix reported
Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13CVE-2026-119190 · GHSA-5X38-2VFF-X55P node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat High Fix reported
Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake messageCVE-2026-119188 · GHSA-8HRF-8G6F-7XWP node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat High Fix reported
Forge: Regular expression denial of service in PEM decoding (pem.decode)CVE-2026-118779 · GHSA-7WCH-P9PX-956X node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat High Fix reported
Forge: Denial of service in TLS record processing via call stack exhaustionCVE-2026-119187 · GHSA-HQQ3-7JHF-C5JX node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat High Fix reported
Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-CookieCVE-2026-118777 · GHSA-6WVX-3R32-XMCG node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat Medium Fix reported
Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA storeCVE-2026-118780 · GHSA-4487-J8R4-4G2F node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat Low Fix reported
Forge: AES-GCM authentication bypass via unvalidated tagLength optionCVE-2026-119186 · GHSA-5CWG-6VW7-RJ6P node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat Medium Fix reported
Forge: ASN.1 OID first arc truncation in asn1.oidToDerCVE-2026-118775 · GHSA-4642-5MCJ-2RQW node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat Low Fix reported
Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891)CVE-2026-118781 · GHSA-H6CR-WJV9-3CPP node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat Low Fix reported
Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration countCVE-2026-118782 · GHSA-JC66-7Q78-782G node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat High Fix reported
Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversalCVE-2026-118773 · GHSA-3G3M-2FJR-6PW4 globCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat Medium Fix reported
Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objectsCVE-2026-34043 · GHSA-QJ8W-GFJ5-8C6V serialize-javascriptCryostat 4/cryostat-openshift-console-plugin-npm npmRed Hat Medium Fix reported
js-beautify: beautifier js-beautify memory allocationCVE-2026-109149 Red Hat Fuse 7/fuse-karaf.fuse-7_13_0-00012-redhat-00001.zipRed Hat Fuse 7/redhat-fuse-maven-repository.zip Red Hat Medium No fix reported
adm-zip: adm-zip: Privilege escalation via unmasked permissions during archive extractionCVE-2026-114105 Cost Management On Premise/costmanagement/costmanagement-ui-rhel10Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/volsync-operator-bundle Red Hat Medium No fix reported