Red Hat OpenShift distributed tracing 3/rhosdt/jaeger-all-in-one-rhel8

Red Hat · Package

8 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Cross-site Scripting (XSS) in serialize-javascriptCVE-2024-11831 · GHSA-76P7-773F-R4Q5	serialize-javascript .NET 6.0 on Red Hat Enterprise Linux/rh-dotnet60-dotnet	npmRed Hat	Medium	Fix reported	2026-10-16
Vite middleware may serve files starting with the same name with the public directoryCVE-2025-58751 · GHSA-G4JQ-H2W9-997C	vite Cryostat 4/io.cryostat-cryostat	npmRed Hat	Low	Fix reported	2026-09-10
Vite's `server.fs` settings were not applied to HTML filesCVE-2025-58752 · GHSA-JQFW-VQ24-V9C3	vite Red Hat Ansible Automation Platform 2/automation-controller	npmRed Hat	Low	Fix reported	2026-09-10
webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browserCVE-2025-30360 · GHSA-9JGG-88MC-972H	webpack-dev-server Cryostat 4/io.cryostat-cryostat	npmRed Hat	Medium	Fix reported	2026-09-10
webpack-dev-server users' source code may be stolen when they access a malicious web siteCVE-2025-30359 · GHSA-4V9V-HFQ4-RM2V	webpack-dev-server Cryostat 4/io.cryostat-cryostat	npmRed Hat	Medium	Fix reported	2026-09-10
cookie accepts cookie name, path, and domain with out of bounds charactersCVE-2024-47764 · GHSA-PXG6-PF52-XH8X	cookie Cryostat 3/cookie	npmRed Hat	Low	Fix reported	2026-09-10
Denial of service in http-proxy-middlewareCVE-2024-21536 · GHSA-C7QV-Q95Q-8V27	http-proxy-middleware Cryostat 3/io.cryostat-cryostat3	npmRed Hat	High	Fix reported	2026-09-10
Express.js Open Redirect in malformed URLsCVE-2024-29041 · GHSA-RV95-896H-C2VC	express A-MQ Interconnect 1/qpid-dispatch	npmRed Hat	Medium	Fix reported	2026-09-10