Security
فارسی
All products

Multicluster Engine for Kubernetes/multicluster-engine/multicluster-engine-console-mce-rhel9

Red Hat · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URLCVE-2025-27152 · GHSA-JR5F-V2JV-69X6 axiosCryostat 3/io.cryostat-cryostat3 npmRed Hat High Fix reported
@octokit/plugin-paginate-rest has a Regular Expression in iterator Leads to ReDoS Vulnerability Due to Catastrophic BacktrackingCVE-2025-25288 · GHSA-H5C3-5R3R-RR8Q @octokit/plugin-paginate-restMulticluster Engine for Kubernetes/multicluster-engine/console-mce-rhel9 npmRed Hat Medium Fix reported
cookie accepts cookie name, path, and domain with out of bounds charactersCVE-2024-47764 · GHSA-PXG6-PF52-XH8X cookieCryostat 3/cookie npmRed Hat Low Fix reported
@octokit/endpoint has a Regular Expression in parse that Leads to ReDoS Vulnerability Due to Catastrophic BacktrackingCVE-2025-25285 · GHSA-X4C5-C7RF-JJGV @octokit/endpointMulticluster Engine for Kubernetes/multicluster-engine/console-mce-rhel9 npmRed Hat Medium Fix reported
@octokit/request has a Regular Expression in fetchWrapper that Leads to ReDoS Vulnerability Due to Catastrophic BacktrackingCVE-2025-25290 · GHSA-RMVR-2PP2-XJ38 @octokit/requestMulticluster Engine for Kubernetes/multicluster-engine/console-mce-rhel9 npmRed Hat Medium Fix reported
PostCSS line return parsing errorCVE-2023-44270 · GHSA-7FH5-64P2-3V2J postcssCryostat 3/io.cryostat-cryostat3 npmRed Hat Medium Fix reported
Valid ECDSA signatures erroneously rejected in EllipticCVE-2024-48948 · GHSA-FC9H-WHQ2-V747 ellipticMulticluster Engine for Kubernetes/multicluster-engine/console-mce-rhel9 npmRed Hat Low Fix reported
jose: Denial of service due to uncontrolled CPU consumptionCVE-2023-50967 Multicluster Engine for Kubernetes/multicluster-engine/console-mce-rhel9Multicluster Engine for Kubernetes/multicluster-engine/multicluster-engine-console-mce-rhel9 Red Hat Medium No fix reported
nodejs-async: Regular expression denial of service while parsing function in autoinjectCVE-2024-39249 Migration Toolkit for Applications 6/asyncMigration Toolkit for Applications 6/mta/mta-ui-rhel9 Red Hat Medium No fix reported