Security
فارسی
All products

Red Hat OpenShift distributed tracing 3/rhosdt/jaeger-query-rhel8

Red Hat · Package
17 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Cross-site Scripting (XSS) in serialize-javascriptCVE-2024-11831 · GHSA-76P7-773F-R4Q5 serialize-javascript.NET 6.0 on Red Hat Enterprise Linux/rh-dotnet60-dotnet npmRed Hat Medium Fix reported
Vite middleware may serve files starting with the same name with the public directoryCVE-2025-58751 · GHSA-G4JQ-H2W9-997C viteCryostat 4/io.cryostat-cryostat npmRed Hat Low Fix reported
Vite's `server.fs` settings were not applied to HTML filesCVE-2025-58752 · GHSA-JQFW-VQ24-V9C3 viteRed Hat Ansible Automation Platform 2/automation-controller npmRed Hat Low Fix reported
webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browserCVE-2025-30360 · GHSA-9JGG-88MC-972H webpack-dev-serverCryostat 4/io.cryostat-cryostat npmRed Hat Medium Fix reported
webpack-dev-server users' source code may be stolen when they access a malicious web siteCVE-2025-30359 · GHSA-4V9V-HFQ4-RM2V webpack-dev-serverCryostat 4/io.cryostat-cryostat npmRed Hat Medium Fix reported
Regular Expression Denial of Service (ReDoS) in cross-spawnCVE-2024-21538 · GHSA-3XGQ-45JJ-V275 cross-spawnCryostat 3/cross-spawn npmRed Hat High Fix reported
cookie accepts cookie name, path, and domain with out of bounds charactersCVE-2024-47764 · GHSA-PXG6-PF52-XH8X cookieCryostat 3/cookie npmRed Hat Low Fix reported
Denial of service in http-proxy-middlewareCVE-2024-21536 · GHSA-C7QV-Q95Q-8V27 http-proxy-middlewareCryostat 3/io.cryostat-cryostat3 npmRed Hat High Fix reported
send vulnerable to template injection that can lead to XSSCVE-2024-43799 · GHSA-M6FV-JMCG-4JFG sendCryostat 3/send npmRed Hat Low Fix reported
serve-static vulnerable to template injection that can lead to XSSCVE-2024-43800 · GHSA-CM22-4G7W-348P serve-staticCryostat 3/serve-static npmRed Hat Low Fix reported
express vulnerable to XSS via response.redirect()CVE-2024-43796 · GHSA-QW6H-VGH9-J6WX expressCryostat 3/express npmRed Hat Low Fix reported
DOM Clobbering Gadget found in rollup bundled scripts that leads to XSSCVE-2024-47068 · GHSA-GCX4-MW62-G8WM rollupMigration Toolkit for Applications 7/mta/mta-ui-rhel9 npmRed Hat High Fix reported
Vite's `server.fs.deny` is bypassed when using `?import&raw`CVE-2024-45811 · GHSA-9CWX-2883-4WFX viteRed Hat Ansible Automation Platform 2/automation-controller npmRed Hat Medium Fix reported
Vite DOM Clobbering gadget found in vite bundled scripts that leads to XSSCVE-2024-45812 · GHSA-64VR-G452-QVP3 viteRed Hat Ansible Automation Platform 2/automation-controller npmRed Hat Medium Fix reported
body-parser vulnerable to denial of service when url encoding is enabledCVE-2024-45590 · GHSA-QWCR-R2FM-QRC7 body-parserCryostat 3/body-parser npmRed Hat High Fix reported
Express.js Open Redirect in malformed URLsCVE-2024-29041 · GHSA-RV95-896H-C2VC expressA-MQ Interconnect 1/qpid-dispatch npmRed Hat Medium Fix reported
path-to-regexp outputs backtracking regular expressionsCVE-2024-45296 · GHSA-9WV6-86V2-598J path-to-regexpCryostat 3/path-to-regexp npmRed Hat High Fix reported