Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Ceph Storage 9/grafana
Red Hat
· Package
13 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Cross-site Scripting (XSS) in serialize-javascript
CVE-2024-11831 · GHSA-76P7-773F-R4Q5
serialize-javascript
.NET 6.0 on Red Hat Enterprise Linux/rh-dotnet60-dotnet
npm
Red Hat
Medium
Fix reported
2026-10-16
js-yaml has prototype pollution in merge (<<)
CVE-2025-64718 · GHSA-MH29-5H37-FV8M
js-yaml
Cryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9
npm
Red Hat
Medium
Fix reported
2026-09-10
form-data uses unsafe random function in form-data for choosing boundary
CVE-2025-7783 · GHSA-FJXV-7RQG-78G4
form-data
Logging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8
npm
Red Hat
Critical
Fix reported
2026-09-10
golang.org/x/crypto/ssh/agent has a potential denial of service
CVE-2025-47913 · GHSA-56W8-48FP-6MGV
golang.org/x/crypto/ssh/agent
golang.org/x/crypto
Go
Red Hat
High
Fix reported
2026-09-10
golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read
CVE-2025-47914 · GHSA-F6X5-JH6R-WRFV
Version ranges need review.
golang.org/x/crypto
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption
CVE-2025-58181 · GHSA-J5W8-Q4QC-RX2X
Version ranges need review.
golang.org/x/crypto
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
golang.org/x/oauth2 Improper Validation of Syntactic Correctness of Input vulnerability
CVE-2025-22868 · GHSA-6V2P-P543-PHR9
Version ranges need review.
golang.org/x/oauth2
Cryostat 3/cryostat-tech-preview/cryostat-storage-rhel8
Go
Red Hat
High
Fix reported
2026-09-10
urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation
CVE-2025-50181 · GHSA-PQ67-6M6Q-MJ2V
Version ranges need review.
urllib3
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-09-10
urllib3 does not control redirects in browsers and Node.js
CVE-2025-50182 · GHSA-48P4-8XCF-VXJ5
Version ranges need review.
urllib3
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-09-10
Predictable results in nanoid generation when given non-integer values
CVE-2024-55565 · GHSA-MWCW-C2X4-8C55
nanoid
Cryostat 3/io.cryostat-cryostat3
npm
Red Hat
Medium
Fix reported
2026-09-10
Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations
CVE-2024-51744 · GHSA-29WX-VH33-7X7R
Version ranges need review.
github.com/golang-jwt/jwt/v4
Builds for Red Hat OpenShift/openshift-builds-triggers-container
Go
Red Hat
Low
Fix reported
2026-09-10
DOMPurify allows Cross-site Scripting (XSS)
CVE-2025-26791 · GHSA-VHXF-7VQR-MRJG
dompurify
Cryostat 3/cryostat/cryostat-rhel9
npm
Red Hat
Medium
Fix reported
2026-09-10
Arbitrary Code Execution in underscore
CVE-2021-23358 · GHSA-CF4H-3JHX-XVHQ
underscore
Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/grc-ui-rhel8
npm
Red Hat
Critical
Fix reported
2025-11-04
