Security
فارسی
All products

Red Hat Enterprise Linux 9/thunderbird:flatpak/thunderbird

Red Hat · Package
24 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
AngularJS improperly sanitizes SVG elementsCVE-2025-0716 · GHSA-J58C-WW9W-PWP5 angularLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 npmRed Hat Low No fix reported
Formidable relies on hexoid to prevent guessing of filenames for untrusted executable contentCVE-2025-46653 · GHSA-75V8-2H7P-7M2M formidableOpenShift Serverless/openshift-serverless-1/kn-backstage-plugins-eventmesh-rhel8 npmRed Hat Low Fix reported
ReDoS vulnerability in vue package that is exploitable through inefficient regex evaluation in the parseHTML functionCVE-2024-9506 · GHSA-5J4C-8P2G-V4JX vueRed Hat Enterprise Linux 10/cldr-emoji-annotation npmRed Hat Low Fix reported
Electron affected by libvpx's heap buffer overflow in vp8 encodingCVE-2023-5217 · GHSA-QQVQ-6XGJ-JW8G electronRed Hat Enterprise Linux 6/libvpx npmRed Hat High Fix reported
Angular vulnerable to Cross-site ScriptingCVE-2021-4231 · GHSA-C75V-2VQ8-878F @angular/core.NET Core 3.1 on Red Hat Enterprise Linux/rh-dotnet31-dotnet npmRed Hat Medium Fix reported
PYSEC-2025-227CVE-2025-2368 · PYSEC-2025-227 wabt-binRed Hat Enterprise Linux 7/firefox PyPIRed Hat High No fix reported
PYSEC-2025-228CVE-2025-2584 · PYSEC-2025-228 wabt-binRed Hat Enterprise Linux 9/thunderbird PyPIRed Hat Medium No fix reported
Some AES functions may panic when overflow checking is enabled in ringCVE-2025-4432 · GHSA-4P46-PWFR-66X6 ringRed Hat Enterprise Linux 10/firefox Rust / CargoRed Hat Medium Fix reported
Next.js may leak x-middleware-subrequest-id to external hostsCVE-2025-30218 · GHSA-223J-4RM8-MRMF nextRed Hat Enterprise Linux 10/firefox npmRed Hat Low Fix reported
Uncontrolled Resource Consumption in HawkCVE-2022-29167 · GHSA-44PW-H2CW-W3VQ hawk.NET Core 5.0 on Red Hat Enterprise Linux/rh-dotnet50-dotnet npmRed Hat High Fix reported
expat: a use-after-free in the doContent function in xmlparse.cCVE-2022-40674 Red Hat Enterprise Linux 8/firefox:flatpak/firefoxRed Hat Enterprise Linux 8/thunderbird:flatpak/thunderbird Red Hat High No fix reported
expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreateCVE-2022-43680 Red Hat Enterprise Linux 6/compat-expat1Red Hat Enterprise Linux 6/expat Red Hat Medium No fix reported
libwebp: out-of-bounds write with a specially crafted WebP lossless fileCVE-2023-5129 Red Hat Enterprise Linux 6/firefoxRed Hat Enterprise Linux 9/firefox:flatpak/firefox Red Hat Unknown No fix reported
libvpx: crash related to VP9 encoding in libvpxCVE-2023-44488 Red Hat Enterprise Linux 7/thunderbirdRed Hat Enterprise Linux 9/firefox:flatpak/firefox Red Hat High No fix reported
expat: parsing large tokens can trigger a denial of serviceCVE-2023-52425 Red Hat Enterprise Linux 6/expatRed Hat Enterprise Linux 7/expat Red Hat Medium No fix reported
libtheora: incorrect bitwise shift in huffdec.cCVE-2024-56431 Red Hat Enterprise Linux 10/libtheoraRed Hat Enterprise Linux 6/libtheora Red Hat Low No fix reported
firefox: thunderbird: WebChannel APIs susceptible to confused deputy attackCVE-2025-0237 Red Hat Enterprise Linux 10/firefoxRed Hat Enterprise Linux 6/firefox Red Hat Medium No fix reported
firefox: Compartment mismatch when parsing JavaScript JSON moduleCVE-2025-0240 Red Hat Enterprise Linux 10/firefox-flatpak-containerRed Hat Enterprise Linux 10/firefox Red Hat Medium No fix reported
firefox: Alt-Svc ALPN validation failure when redirectedCVE-2025-0239 Red Hat Enterprise Linux 10/firefox-flatpak-containerRed Hat Enterprise Linux 10/firefox Red Hat Medium No fix reported
firefox: Memory corruption when using JavaScript Text SegmentationCVE-2025-0241 Red Hat Enterprise Linux 10/firefox-flatpak-containerRed Hat Enterprise Linux 10/firefox Red Hat Medium No fix reported