Security
فارسی
All products

Red Hat OpenShift Container Platform 3.11/openshift3/ose-console

Red Hat · Package
50 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Cross-site Scripting (XSS) in serialize-javascriptCVE-2024-11831 · GHSA-76P7-773F-R4Q5 serialize-javascript.NET 6.0 on Red Hat Enterprise Linux/rh-dotnet60-dotnet npmRed Hat Medium Fix reported
send vulnerable to template injection that can lead to XSSCVE-2024-43799 · GHSA-M6FV-JMCG-4JFG sendCryostat 3/send npmRed Hat Low Fix reported
serve-static vulnerable to template injection that can lead to XSSCVE-2024-43800 · GHSA-CM22-4G7W-348P serve-staticCryostat 3/serve-static npmRed Hat Low Fix reported
express vulnerable to XSS via response.redirect()CVE-2024-43796 · GHSA-QW6H-VGH9-J6WX expressCryostat 3/express npmRed Hat Low Fix reported
body-parser vulnerable to denial of service when url encoding is enabledCVE-2024-45590 · GHSA-QWCR-R2FM-QRC7 body-parserCryostat 3/body-parser npmRed Hat High Fix reported
Webpack's AutoPublicPathRuntimeModule has a DOM Clobbering Gadget that leads to XSSCVE-2024-43788 · GHSA-4VVJ-4CPR-P986 webpackLogging Subsystem for Red Hat OpenShift/openshift-logging/logging-view-plugin-rhel8 npmRed Hat Medium Fix reported
Express.js Open Redirect in malformed URLsCVE-2024-29041 · GHSA-RV95-896H-C2VC expressA-MQ Interconnect 1/qpid-dispatch npmRed Hat Medium Fix reported
Denial of service while parsing a tar file due to lack of folders count validationCVE-2024-28863 · GHSA-F5X3-32G6-XQ36 node-tartar npmRed Hat Medium Fix reported
browserify-sign upper bound check issue in `dsaVerify` leads to a signature forgery attackCVE-2023-46234 · GHSA-X9W5-V3Q2-3RHW browserify-signOpenShift Pipelines/openshift-pipelines/pipelines-hub-api-rhel8 npmRed Hat High Fix reported
semver vulnerable to Regular Expression Denial of ServiceCVE-2022-25883 · GHSA-C2QF-RXJJ-QQGW semverMigration Toolkit for Applications 6/mta/mta-ui-rhel9 npmRed Hat High Fix reported
Prototype Pollution in JSON5 via Parse MethodCVE-2022-46175 · GHSA-9C47-M6QQ-7P4H json5Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed HatWordPress High Fix reported
tough-cookie Prototype Pollution vulnerabilityCVE-2023-26136 · GHSA-72XF-G2V4-QVF3 tough-cookieMigration Toolkit for Applications 6/mta/mta-ui-rhel9 npmRed Hat Medium Fix reported
http-cache-semantics vulnerable to Regular Expression Denial of ServiceCVE-2022-25881 · GHSA-RC47-6667-2J5J org.webjars.npm:http-cache-semanticshttp-cache-semantics MavennpmRed HatWordPress High Fix reported
minimatch ReDoS vulnerabilityCVE-2022-3517 · GHSA-F8Q6-P94X-37V3 minimatchMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed Hat High Fix reported
Prototype pollution in webpack loader-utilsCVE-2022-37601 · GHSA-76P3-8JX3-JPFQ loader-utilsMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed HatWordPress Critical Fix reported
Path Traversal: 'dir/../../filename' in moment.localeCVE-2022-24785 · GHSA-8HFJ-J24R-96C4 momentmoment.js npmNuGetRed Hat High Fix reported
bootstrap Cross-site Scripting vulnerabilityCVE-2018-20677 · GHSA-PH58-4VRJ-W6HR twbs/bootstraporg.webjars:bootstrap ComposerMavennpmNuGetRed HatRubyGems Medium Fix reported
Bootstrap Vulnerable to Cross-Site ScriptingCVE-2019-8331 · GHSA-9V3M-8FP8-MJ99 twbs/bootstraporg.webjars:bootstrap ComposerMavennpmNuGetRed HatRubyGems Medium Fix reported
XSS vulnerability that affects bootstrapCVE-2018-20676 · GHSA-3MGP-FX93-9XV5 twbs/bootstraporg.webjars:bootstrap ComposerMavennpmNuGetRed HatRubyGems Medium Fix reported
OpenShift Console Has a Path Traversal VulnerabilityCVE-2024-7631 · GHSA-69X5-HJG4-M267Version ranges need review. github.com/openshift/consoleRed Hat OpenShift Container Platform 3.11/openshift3/ose-console GoRed Hat Medium No fix reported