Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Edge Manager preview/rhem/flightctl-db-setup-rhel9
Red Hat
· Package
12 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Lodash has Prototype Pollution Vulnerability in `_.unset`, `_.omit`, and `_.pullAt` functions
CVE-2025-13465 · GHSA-XXJR-MMJV-4GPG
lodash-amd
lodash-es
npm
Red Hat
Medium
Fix reported
2026-11-04
urllib3 streaming API improperly handles highly compressed data
CVE-2025-66471 · GHSA-2XPW-W6GG-JR37
Version ranges need review.
urllib3
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-shared-resource-webhook-rhel9
PyPI
Red Hat
High
Fix reported
2026-09-25
kube-controller-manager is vulnerable to half-blind Server Side Request Forgery through in-tree Portworx StorageClass
CVE-2025-13281 · GHSA-R6J8-C6R2-37RR
Version ranges need review.
k8s.io/kubernetes
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-shared-resource-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
urllib3 allows an unbounded number of links in the decompression chain
CVE-2025-66418 · GHSA-GM62-XV2J-4W53
Version ranges need review.
urllib3
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
PyPI
Red Hat
High
Fix reported
2026-09-10
js-yaml has prototype pollution in merge (<<)
CVE-2025-64718 · GHSA-MH29-5H37-FV8M
js-yaml
Cryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9
npm
Red Hat
Medium
Fix reported
2026-09-10
Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)
CVE-2026-21441 · GHSA-38JV-5279-WG99
Version ranges need review.
urllib3
External Secrets Operator for Red Hat OpenShift/external-secrets-operator/bitwarden-sdk-server-rhel9
PyPI
Red Hat
High
Fix reported
2026-09-10
golang.org/x/crypto/ssh/agent has a potential denial of service
CVE-2025-47913 · GHSA-56W8-48FP-6MGV
golang.org/x/crypto/ssh/agent
golang.org/x/crypto
Go
Red Hat
High
Fix reported
2026-09-10
golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read
CVE-2025-47914 · GHSA-F6X5-JH6R-WRFV
Version ranges need review.
golang.org/x/crypto
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption
CVE-2025-58181 · GHSA-J5W8-Q4QC-RX2X
Version ranges need review.
golang.org/x/crypto
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
Excessive resource consumption when printing error string for host certificate validation in crypto/x509
CVE-2025-61729 · GO-2025-4155
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
Go
Red Hat
High
Fix reported
2026-08-14
React Router vulnerable to XSS via Open Redirects
CVE-2026-22029 · GHSA-2W69-QVJG-HVJX
@remix-run/router
react-router
npm
Red Hat
High
Fix reported
2026-02-03
React Router has unexpected external redirect via untrusted paths
CVE-2025-68470 · GHSA-9JCX-V3WJ-WH4M
react-router
Cryostat 4/io.cryostat-cryostat
npm
Red Hat
Medium
Fix reported
2026-02-03
