Security
فارسی
All products

Red Hat OpenShift Dev Spaces/devspaces/dashboard-rhel8

Red Hat · Package
38 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Cross-site Scripting (XSS) in serialize-javascriptCVE-2024-11831 · GHSA-76P7-773F-R4Q5 serialize-javascript.NET 6.0 on Red Hat Enterprise Linux/rh-dotnet60-dotnet npmRed Hat Medium Fix reported
form-data uses unsafe random function in form-data for choosing boundaryCVE-2025-7783 · GHSA-FJXV-7RQG-78G4 form-dataLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 npmRed Hat Critical Fix reported
axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URLCVE-2025-27152 · GHSA-JR5F-V2JV-69X6 axiosCryostat 3/io.cryostat-cryostat3 npmRed Hat High Fix reported
path-to-regexp contains a ReDoSCVE-2024-52798 · GHSA-RHX6-C78J-4Q9W path-to-regexpLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 npmRed Hat High Fix reported
Use of Insufficiently Random Values in undiciCVE-2025-22150 · GHSA-C76H-2CCP-4975 undiciOpenShift Lightspeed/openshift-lightspeed-tech-preview/lightspeed-console-plugin-rhel9 npmRed Hat Medium Fix reported
Axios is vulnerable to DoS attack through lack of data size checkCVE-2025-58754 · GHSA-4HJH-WCWX-XVWJ axiosMigration Toolkit for Applications 8/mta/mta-ui-rhel9 npmRed Hat High Fix reported
pbkdf2 silently disregards Uint8Array input, returning static keysCVE-2025-6547 · GHSA-V62P-RQ8G-8H59 pbkdf2Logging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 npmRed Hat Critical Fix reported
undici Denial of Service attack via bad certificate dataCVE-2025-47279 · GHSA-CXRH-J4JR-QWG3 undiciCryostat 4/io.cryostat-cryostat npmRed Hat Low Fix reported
Predictable results in nanoid generation when given non-integer valuesCVE-2024-55565 · GHSA-MWCW-C2X4-8C55 nanoidCryostat 3/io.cryostat-cryostat3 npmRed Hat Medium Fix reported
Regular Expression Denial of Service (ReDoS) in cross-spawnCVE-2024-21538 · GHSA-3XGQ-45JJ-V275 cross-spawnCryostat 3/cross-spawn npmRed Hat High Fix reported
cookie accepts cookie name, path, and domain with out of bounds charactersCVE-2024-47764 · GHSA-PXG6-PF52-XH8X cookieCryostat 3/cookie npmRed Hat Low Fix reported
ws affected by a DoS when handling a request with many HTTP headersCVE-2024-37890 · GHSA-3H5V-Q93C-6H6Q ws.NET 6.0 on Red Hat Enterprise Linux/rh-dotnet60-dotnet npmRed Hat High Fix reported
Denial of service while parsing a tar file due to lack of folders count validationCVE-2024-28863 · GHSA-F5X3-32G6-XQ36 node-tartar npmRed Hat Medium Fix reported
sanitize-html Information Exposure vulnerabilityCVE-2024-21501 · GHSA-RM97-X556-Q36H sanitize-htmlRed Hat Developer Hub 1/rhdh/rhdh-hub-rhel9 npmRed Hat Medium Fix reported
browserify-sign upper bound check issue in `dsaVerify` leads to a signature forgery attackCVE-2023-46234 · GHSA-X9W5-V3Q2-3RHW browserify-signOpenShift Pipelines/openshift-pipelines/pipelines-hub-api-rhel8 npmRed Hat High Fix reported
Follow Redirects improperly handles URLs in the url.parse() functionCVE-2023-26159 · GHSA-JCHW-25XP-JWWC follow-redirectsCryostat 2/follow-redirects npmRed Hat Medium Fix reported
PostCSS line return parsing errorCVE-2023-44270 · GHSA-7FH5-64P2-3V2J postcssCryostat 3/io.cryostat-cryostat3 npmRed Hat Medium Fix reported
tough-cookie Prototype Pollution vulnerabilityCVE-2023-26136 · GHSA-72XF-G2V4-QVF3 tough-cookieMigration Toolkit for Applications 6/mta/mta-ui-rhel9 npmRed Hat Medium Fix reported
http-cache-semantics vulnerable to Regular Expression Denial of ServiceCVE-2022-25881 · GHSA-RC47-6667-2J5J org.webjars.npm:http-cache-semanticshttp-cache-semantics MavennpmRed HatWordPress High Fix reported
minimatch ReDoS vulnerabilityCVE-2022-3517 · GHSA-F8Q6-P94X-37V3 minimatchMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed Hat High Fix reported