Security
فارسی
All products

Migration Toolkit for Applications 7/mta/mta-ui-rhel9

Red Hat · Package
22 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
js-yaml has prototype pollution in merge (<<)CVE-2025-64718 · GHSA-MH29-5H37-FV8M js-yamlCryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9 npmRed Hat Medium Fix reported
axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URLCVE-2025-27152 · GHSA-JR5F-V2JV-69X6 axiosCryostat 3/io.cryostat-cryostat3 npmRed Hat High Fix reported
path-to-regexp contains a ReDoSCVE-2024-52798 · GHSA-RHX6-C78J-4Q9W path-to-regexpLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 npmRed Hat High Fix reported
mdast-util-to-hast has unsanitized class attributeCVE-2025-66400 · GHSA-4FH9-H7WG-Q85M mdast-util-to-hastGatekeeper 3/gatekeeper/gatekeeper-rhel9 npmRed Hat Medium Fix reported
body-parser is vulnerable to denial of service when url encoding is usedCVE-2025-13466 · GHSA-WQCH-XFXH-VRR4 body-parserCryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9 npmRed Hat Medium Fix reported
http-proxy-middleware allows fixRequestBody to proceed even if bodyParser has failedCVE-2025-32997 · GHSA-9GQV-WP59-FQ42 http-proxy-middlewareCryostat 3/io.cryostat-cryostat3 npmRed Hat Medium Fix reported
http-proxy-middleware can call writeBody twice because "else if" is not usedCVE-2025-32996 · GHSA-4WWW-5P9H-95MH http-proxy-middlewareCryostat 3/io.cryostat-cryostat3 npmRed Hat Medium Fix reported
Predictable results in nanoid generation when given non-integer valuesCVE-2024-55565 · GHSA-MWCW-C2X4-8C55 nanoidCryostat 3/io.cryostat-cryostat3 npmRed Hat Medium Fix reported
Regular Expression Denial of Service (ReDoS) in cross-spawnCVE-2024-21538 · GHSA-3XGQ-45JJ-V275 cross-spawnCryostat 3/cross-spawn npmRed Hat High Fix reported
cookie accepts cookie name, path, and domain with out of bounds charactersCVE-2024-47764 · GHSA-PXG6-PF52-XH8X cookieCryostat 3/cookie npmRed Hat Low Fix reported
Denial of service in http-proxy-middlewareCVE-2024-21536 · GHSA-C7QV-Q95Q-8V27 http-proxy-middlewareCryostat 3/io.cryostat-cryostat3 npmRed Hat High Fix reported
send vulnerable to template injection that can lead to XSSCVE-2024-43799 · GHSA-M6FV-JMCG-4JFG sendCryostat 3/send npmRed Hat Low Fix reported
serve-static vulnerable to template injection that can lead to XSSCVE-2024-43800 · GHSA-CM22-4G7W-348P serve-staticCryostat 3/serve-static npmRed Hat Low Fix reported
express vulnerable to XSS via response.redirect()CVE-2024-43796 · GHSA-QW6H-VGH9-J6WX expressCryostat 3/express npmRed Hat Low Fix reported
DOM Clobbering Gadget found in rollup bundled scripts that leads to XSSCVE-2024-47068 · GHSA-GCX4-MW62-G8WM rollupMigration Toolkit for Applications 7/mta/mta-ui-rhel9 npmRed Hat High Fix reported
body-parser vulnerable to denial of service when url encoding is enabledCVE-2024-45590 · GHSA-QWCR-R2FM-QRC7 body-parserCryostat 3/body-parser npmRed Hat High Fix reported
Webpack's AutoPublicPathRuntimeModule has a DOM Clobbering Gadget that leads to XSSCVE-2024-43788 · GHSA-4VVJ-4CPR-P986 webpackLogging Subsystem for Red Hat OpenShift/openshift-logging/logging-view-plugin-rhel8 npmRed Hat Medium Fix reported
Express.js Open Redirect in malformed URLsCVE-2024-29041 · GHSA-RV95-896H-C2VC expressA-MQ Interconnect 1/qpid-dispatch npmRed Hat Medium Fix reported
Uncontrolled resource consumption in bracesCVE-2024-4068 · GHSA-GRV7-FG5C-XMJG bracesCryostat 2/braces npmRed Hat High Fix reported
PostCSS line return parsing errorCVE-2023-44270 · GHSA-7FH5-64P2-3V2J postcssCryostat 3/io.cryostat-cryostat3 npmRed Hat Medium Fix reported