All products

Red Hat OpenShift AI (RHOAI)/rhods/odh-dashboard-rhel8

Red Hat · Package
7 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
form-data uses unsafe random function in form-data for choosing boundaryCVE-2025-7783 · GHSA-FJXV-7RQG-78G4 form-dataMigration Toolkit for Virtualization/mtv-candidate/mtv-console-plugin-rhel9 npmRed Hat Critical Fix reported
tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameterCVE-2025-54798 · GHSA-52F5-9888-HMC6 tmpCryostat 4/io.cryostat-cryostat npmRed Hat Low Fix reported
webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browserCVE-2025-30360 · GHSA-9JGG-88MC-972H webpack-dev-serverCryostat 4/io.cryostat-cryostat npmRed Hat Medium Fix reported
on-headers is vulnerable to http response header manipulationCVE-2025-7339 · GHSA-76C9-3JPH-RJ3Q on-headersCryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9 npmRed Hat Low Fix reported
undici Denial of Service attack via bad certificate dataCVE-2025-47279 · GHSA-CXRH-J4JR-QWG3 undiciCryostat 4/io.cryostat-cryostat npmRed Hat Low Fix reported
webpack-dev-server users' source code may be stolen when they access a malicious web siteCVE-2025-30359 · GHSA-4V9V-HFQ4-RM2V webpack-dev-serverCryostat 4/io.cryostat-cryostat npmRed Hat Medium Fix reported
prettier: prettier parseNestedCSS ReDoSCVE-2025-8263 Cryostat 4/io.cryostat-cryostatMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-console-plugin-rhel9 Red Hat Medium No fix reported