| HTTP/2 rapid reset can cause excessive work in net/httpCVE-2023-39325 · GHSA-4374-P667-P6C8Version ranges need review. |
golang.org/x/netstdlib |
GoRed Hat |
High
|
Fix reported |
|
| golang.org/x/oauth2 Improper Validation of Syntactic Correctness of Input vulnerabilityCVE-2025-22868 · GHSA-6V2P-P543-PHR9Version ranges need review. |
golang.org/x/oauth2Cryostat 3/cryostat-tech-preview/cryostat-storage-rhel8 |
GoRed Hat |
High
|
Fix reported |
|
| PrismJS DOM Clobbering vulnerabilityCVE-2024-53382 · GHSA-X7HR-W5R2-H6WG |
prismjsMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-console-plugin-rhel9 |
npmRed Hat |
Medium
|
Fix reported |
|
| angular vulnerable to super-linear runtime due to backtrackingCVE-2024-21490 · GHSA-4W4V-5HC9-XRR2 |
org.webjars.bower:angularorg.webjars.npm:angular |
MavennpmRed Hat |
High
|
No fix reported |
|
| Grafana Arbitrary File ReadCVE-2019-19499 · GHSA-4PWP-CX67-5CPXVersion ranges need review. |
github.com/grafana/grafanaOpenShift Service Mesh 1/servicemesh-grafana |
GoRed Hat |
Medium
|
Fix reported |
|
| angular vulnerable to regular expression denial of service via the angular.copy() utilityCVE-2023-26116 · GHSA-2VRF-HF26-JRP5 |
angularOpenShift Service Mesh 2.1/servicemesh-grafana |
npmRed Hat |
Medium
|
No fix reported |
|
| angular vulnerable to regular expression denial of service via the $resource serviceCVE-2023-26117 · GHSA-2QQX-W9HR-Q5GX |
angularOpenShift Service Mesh 2.1/servicemesh-grafana |
npmRed Hat |
Medium
|
No fix reported |
|
| angular vulnerable to regular expression denial of service via the <input type="url"> elementCVE-2023-26118 · GHSA-QWQH-HM9M-P5HR |
angularOpenShift Service Mesh 2.1/servicemesh-grafana |
npmRed Hat |
Medium
|
No fix reported |
|
| Grafana XSS via a column styleCVE-2018-18624 · GHSA-9HV8-4FRF-CPRFVersion ranges need review. |
github.com/grafana/grafanaOpenShift Service Mesh 1/servicemesh-grafana |
GoRed Hat |
Medium
|
Fix reported |
|
| Path Traversal: 'dir/../../filename' in moment.localeCVE-2022-24785 · GHSA-8HFJ-J24R-96C4 |
momentmoment.js |
npmNuGetRed Hat |
High
|
Fix reported |
|
| Grafana: Users outside an organization can delete a snapshot with its keyCVE-2024-1313 · GHSA-67RV-QPW2-6QRRVersion ranges need review. |
github.com/grafana/grafanaRed Hat Ceph Storage 6/rhceph/rhceph-6-dashboard-rhel9 |
GoRed Hat |
High
|
Fix reported |
|
| Grafana XSS via the OpenTSDB datasourceCVE-2020-13430 · GHSA-7M2X-QHRQ-RP8HVersion ranges need review. |
github.com/grafana/grafanaRed Hat Ceph Storage 2/grafana |
GoRed Hat |
Medium
|
Fix reported |
|
| Grafana Stored Cross-site Scripting in Unified AlertingCVE-2022-31097 · GHSA-VW7Q-P2QG-4M5FVersion ranges need review. |
github.com/grafana/grafanaOpenShift Service Mesh 2.0/servicemesh-grafana |
GoRed Hat |
Medium
|
Fix reported |
|
| Grafana stored XSSCVE-2020-11110 · GHSA-XR3X-62QW-VC4WVersion ranges need review. |
github.com/grafana/grafanaOpenShift Service Mesh 1/servicemesh-grafana |
GoRed Hat |
Medium
|
Fix reported |
|
| Grafana XSS in header column renameCVE-2020-12245 · GHSA-CCMG-W4XM-P28VVersion ranges need review. |
github.com/grafana/grafanaRed Hat Ceph Storage 2/grafana |
GoRed Hat |
Medium
|
Fix reported |
|
| Grafana Email addresses and usernames can not be trustedCVE-2022-39306 · GHSA-2X6G-H2HG-RQ84Version ranges need review. |
github.com/grafana/grafanaOpenShift Service Mesh 2.0/openshift-service-mesh/grafana-rhel8 |
GoRed Hat |
High
|
Fix reported |
|
| Grafana information disclosureCVE-2020-12458 · GHSA-3JQ7-8PH8-63XMVersion ranges need review. |
github.com/grafana/grafanaOpenShift Service Mesh 1/servicemesh-grafana |
GoRed Hat |
High
|
Fix reported |
|
| Grafana XSS via a query alias for the ElasticSearch datasourceCVE-2020-24303 · GHSA-MVPR-Q6RH-8VRPVersion ranges need review. |
github.com/grafana/grafanaOpenShift Service Mesh 1/servicemesh-grafana |
GoRed Hat |
Medium
|
Fix reported |
|
| Grafana Cross-site Scripting (XSS)CVE-2018-12099 · GHSA-V5GQ-QVJQ-8P53Version ranges need review. |
github.com/grafana/grafanaRed Hat Ceph Storage 2/grafana |
GoRed Hat |
Medium
|
Fix reported |
|
| Grafana XSS via adding a link in General featureCVE-2018-18625 · GHSA-6WH2-8HW7-JW94Version ranges need review. |
github.com/grafana/grafanaRed Hat Ceph Storage 2/grafana |
GoRed Hat |
Medium
|
Fix reported |
|
