Security
فارسی
All products

Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/console-rhel8

Red Hat · Package
62 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URLCVE-2025-27152 · GHSA-JR5F-V2JV-69X6 axiosCryostat 3/io.cryostat-cryostat3 npmRed Hat High Fix reported
@octokit/plugin-paginate-rest has a Regular Expression in iterator Leads to ReDoS Vulnerability Due to Catastrophic BacktrackingCVE-2025-25288 · GHSA-H5C3-5R3R-RR8Q @octokit/plugin-paginate-restMulticluster Engine for Kubernetes/multicluster-engine/console-mce-rhel9 npmRed Hat Medium Fix reported
cookie accepts cookie name, path, and domain with out of bounds charactersCVE-2024-47764 · GHSA-PXG6-PF52-XH8X cookieCryostat 3/cookie npmRed Hat Low Fix reported
vm2 Sandbox Escape vulnerabilityCVE-2023-32314 · GHSA-WHPJ-8F3W-67P5 vm2Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/console-rhel8 npmRed Hat Critical Fix reported
@octokit/endpoint has a Regular Expression in parse that Leads to ReDoS Vulnerability Due to Catastrophic BacktrackingCVE-2025-25285 · GHSA-X4C5-C7RF-JJGV @octokit/endpointMulticluster Engine for Kubernetes/multicluster-engine/console-mce-rhel9 npmRed Hat Medium Fix reported
@octokit/request has a Regular Expression in fetchWrapper that Leads to ReDoS Vulnerability Due to Catastrophic BacktrackingCVE-2025-25290 · GHSA-RMVR-2PP2-XJ38 @octokit/requestMulticluster Engine for Kubernetes/multicluster-engine/console-mce-rhel9 npmRed Hat Medium Fix reported
DOMPurify allows Cross-site Scripting (XSS)CVE-2025-26791 · GHSA-VHXF-7VQR-MRJG dompurifyCryostat 3/cryostat/cryostat-rhel9 npmRed Hat Medium Fix reported
vm2 vulnerable to Inspect ManipulationCVE-2023-32313 · GHSA-P5GC-C584-JJ6V vm2Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/console-rhel8 npmRed Hat Medium Fix reported
PostCSS line return parsing errorCVE-2023-44270 · GHSA-7FH5-64P2-3V2J postcssCryostat 3/io.cryostat-cryostat3 npmRed Hat Medium Fix reported
Prototype Pollution in JSON5 via Parse MethodCVE-2022-46175 · GHSA-9C47-M6QQ-7P4H json5Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed HatWordPress High Fix reported
tough-cookie Prototype Pollution vulnerabilityCVE-2023-26136 · GHSA-72XF-G2V4-QVF3 tough-cookieMigration Toolkit for Applications 6/mta/mta-ui-rhel9 npmRed Hat Medium Fix reported
vm2 vulnerable to sandbox escapeCVE-2023-29017 · GHSA-7JXR-CG7F-GPGV vm2Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/console-rhel8 npmRed Hat Critical Fix reported
http-cache-semantics vulnerable to Regular Expression Denial of ServiceCVE-2022-25881 · GHSA-RC47-6667-2J5J org.webjars.npm:http-cache-semanticshttp-cache-semantics MavennpmRed HatWordPress High Fix reported
minimatch ReDoS vulnerabilityCVE-2022-3517 · GHSA-F8Q6-P94X-37V3 minimatchMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed Hat High Fix reported
Moment.js vulnerable to Inefficient Regular Expression ComplexityCVE-2022-31129 · GHSA-WC69-RHJR-HC9G momentmoment.js npmNuGetRed Hat High Fix reported
Path Traversal: 'dir/../../filename' in moment.localeCVE-2022-24785 · GHSA-8HFJ-J24R-96C4 momentmoment.js npmNuGetRed Hat High Fix reported
Exposure of Sensitive Information to an Unauthorized Actor in follow-redirectsCVE-2022-0536 · GHSA-PW2R-VQ6V-HR8C follow-redirects.NET Core 3.1 on Red Hat Enterprise Linux/rh-dotnet31-dotnet npmRed Hat Medium Fix reported
Inefficient Regular Expression Complexity in markedCVE-2022-21680 · GHSA-RRRM-QJM4-V8HF markedOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat High Fix reported
Exposure of sensitive information in follow-redirectsCVE-2022-0155 · GHSA-74FJ-2J2H-C42Q follow-redirectsOpenShift Service Mesh 1/npm-follow-redirects npmRed Hat High Fix reported
Inefficient Regular Expression Complexity in markedCVE-2022-21681 · GHSA-5V2H-R2CX-5XGJ markedOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat High Fix reported