Red Hat Enterprise Linux 8/uglify-js
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| minimatch has potential denial of service via globparts amplification | minimatchCost Management On Premise/costmanagement/costmanagement-ui-rhel10 | npmRed Hat | Medium | Fix reported | |
| Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal | globCost Management On Premise/costmanagement/costmanagement-ui-rhel10 | npmRed Hat | Medium | Fix reported | |
| minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions | minimatchLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-operator-bundle | npmRed Hat | High | Fix reported | |
| minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments | minimatchCryostat 4/io.cryostat-cryostat | npmRed Hat | High | Fix reported | |
| minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern | minimatchLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 | npmRed Hat | High | Fix reported |