Security
فارسی
All products

Red Hat Advanced Cluster Security 4/advanced-cluster-security/rhacs-collector-rhel8

Red Hat · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
rardecode: DoS risk due to unrestricted RAR dictionary sizesCVE-2025-11579 · GHSA-RWVP-R38J-9RGGVersion ranges need review. github.com/nwaples/rardecode/v2github.com/nwaples/rardecode GoRed Hat Medium Fix reported
containerd CRI server: Host memory exhaustion through Attach goroutine leakCVE-2025-64329 · GHSA-M6HQ-P25P-FFR2Version ranges need review. github.com/containerd/containerd/v2github.com/containerd/containerd GoRed Hat Medium Fix reported
js-yaml has prototype pollution in merge (<<)CVE-2025-64718 · GHSA-MH29-5H37-FV8M js-yamlCryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9 npmRed Hat Medium Fix reported
node-forge is vulnerable to ASN.1 OID Integer TruncationCVE-2025-66030 · GHSA-65CH-62R8-G69G node-forgeCryostat 4/io.cryostat-cryostat npmRed Hat Medium Fix reported
node-forge has ASN.1 Unbounded RecursionCVE-2025-66031 · GHSA-554W-WPV2-VW27 node-forgeLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-operator-bundle npmRed Hat High Fix reported
min-document vulnerable to prototype pollutionCVE-2025-57352 · GHSA-RX8G-88G5-QH64 min-documentLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-operator-bundle npmRed Hat Low Fix reported
Tornado: Quadratic DoS via Crafted Multipart ParametersCVE-2025-67726 · GHSA-JHMP-MQWM-3GQ8Version ranges need review. tornadoRed Hat Advanced Cluster Security 4/advanced-cluster-security/rhacs-collector-rhel8 PyPIRed Hat High Fix reported
Tornado vulnerable to Header Injection and XSS via reason argumentCVE-2025-67724 · GHSA-PR2V-JX2C-WG9FVersion ranges need review. tornadoExternal Secrets Operator for Red Hat OpenShift/external-secrets-operator/bitwarden-sdk-server-rhel9 PyPIRed Hat Medium Fix reported
PyMdown Extensions has a ReDOS bug in its Figure Capture extensionCVE-2025-68142 · GHSA-R6H4-MM7H-8PMQVersion ranges need review. pymdown-extensionsAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 PyPIRed Hat Low Fix reported