All products

OpenShift Lightspeed/openshift-lightspeed-tech-preview/lightspeed-console-plugin-rhel9

Red Hat · Package
11 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
path-to-regexp contains a ReDoSCVE-2024-52798 · GHSA-RHX6-C78J-4Q9W path-to-regexpLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 npmRed Hat High Fix reported
Use of Insufficiently Random Values in undiciCVE-2025-22150 · GHSA-C76H-2CCP-4975 undiciOpenShift Lightspeed/openshift-lightspeed-tech-preview/lightspeed-console-plugin-rhel9 npmRed Hat Medium Fix reported
webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browserCVE-2025-30360 · GHSA-9JGG-88MC-972H webpack-dev-serverCryostat 4/io.cryostat-cryostat npmRed Hat Medium Fix reported
undici Denial of Service attack via bad certificate dataCVE-2025-47279 · GHSA-CXRH-J4JR-QWG3 undiciCryostat 4/io.cryostat-cryostat npmRed Hat Low Fix reported
webpack-dev-server users' source code may be stolen when they access a malicious web siteCVE-2025-30359 · GHSA-4V9V-HFQ4-RM2V webpack-dev-serverCryostat 4/io.cryostat-cryostat npmRed Hat Medium Fix reported
http-proxy-middleware allows fixRequestBody to proceed even if bodyParser has failedCVE-2025-32997 · GHSA-9GQV-WP59-FQ42 http-proxy-middlewareCryostat 3/io.cryostat-cryostat3 npmRed Hat Medium Fix reported
http-proxy-middleware can call writeBody twice because "else if" is not usedCVE-2025-32996 · GHSA-4WWW-5P9H-95MH http-proxy-middlewareCryostat 3/io.cryostat-cryostat3 npmRed Hat Medium Fix reported
Predictable results in nanoid generation when given non-integer valuesCVE-2024-55565 · GHSA-MWCW-C2X4-8C55 nanoidCryostat 3/io.cryostat-cryostat3 npmRed Hat Medium Fix reported
Regular Expression Denial of Service (ReDoS) in cross-spawnCVE-2024-21538 · GHSA-3XGQ-45JJ-V275 cross-spawnCryostat 3/cross-spawn npmRed Hat High Fix reported
PostCSS line return parsing errorCVE-2023-44270 · GHSA-7FH5-64P2-3V2J postcssCryostat 3/io.cryostat-cryostat3 npmRed Hat Medium Fix reported
setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File WriteCVE-2025-47273 · GHSA-5RJG-FVGR-3XXFVersion ranges need review. setuptoolsConfidential Compute Attestation/confidential-compute-attestation-tech-preview/trustee-rhel9 PyPIRed Hat High Fix reported