Red Hat JBoss Enterprise Application Platform 8/io.smallrye-smallrye-open-api-parent
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| js-yaml has prototype pollution in merge (<<) | js-yamlCryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9 | npmRed Hat | Medium | Fix reported | |
| qs's arrayLimit bypass in comma parsing allows denial of service | qsCryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9 | npmRed Hat | Low | Fix reported | |
| webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior | webpackCryostat 4/io.cryostat-cryostat | npmRed Hat | Low | Fix reported | |
| webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects → SSRF + cache persistence | webpackCryostat 4/io.cryostat-cryostat | npmRed Hat | Low | Fix reported |