All products

Red Hat OpenShift Container Platform 3.11/kibana

Red Hat · Package
44 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Command Injection in lodashCVE-2021-23337 · GHSA-35JH-R3H4-6JHM lodash-eslodash-template npmRed HatRubyGems High Fix reported
Vega has Cross-site Scripting vulnerability in `lassoAppend` functionCVE-2023-26487 · GHSA-W5M3-XH75-MP55 vega-functionsvega npmRed Hat Medium Fix reported
Vega Expression Language `scale` expression function Cross Site ScriptingCVE-2023-26486 · GHSA-4VQ7-882G-WCG4 vega-functionsvega npmRed Hat Medium Fix reported
Prototype Pollution in handlebarsCVE-2019-19919 · GHSA-W457-6Q6X-CGP9 handlebarsRed Hat OpenShift Container Platform 3.11/kibana npmRed HatRubyGems Critical Fix reported
Remote code execution in handlebars when compiling templatesCVE-2021-23369 · GHSA-F2JV-R9RF-7988 org.webjars.bowergithub.wycats:handlebars.jsorg.webjars.npm:handlebars MavennpmRed Hat Critical Fix reported
Prototype Pollution in handlebarsCVE-2021-23383 · GHSA-765H-QJXV-5F44 handlebarsOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat Critical Fix reported
Prototype Pollution in node-jsonpointerCVE-2021-23807 · GHSA-282F-QQGM-C34Q jsonpointerorg.webjars.npm:json-pointer npmRed Hat Medium Fix reported
Inefficient Regular Expression Complexity in chalk/ansi-regexCVE-2021-3807 · GHSA-93Q8-GQ69-WQMW ansi-regexMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed Hat High Fix reported
Prototype Pollution in minimistCVE-2020-7598 · GHSA-VH95-RMGR-6W4M minimistLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 npmRed Hat Medium Fix reported
Angular vulnerable to Cross-site ScriptingCVE-2020-7676 · GHSA-MHP6-PXH8-R675 angularOpenShift Service Mesh 1/servicemesh-grafana npmRed Hat Medium Fix reported
Regular Expression Denial of Service (ReDoS) in lodashCVE-2020-28500 · GHSA-29MW-WPGM-HMR9 lodash-eslodash.trim npmRed HatRubyGems Medium Fix reported
Prototype Pollution in lodashCVE-2020-8203 · GHSA-P6MC-M468-83GW lodash-eslodash.pick npmRed HatRubyGemsWordPress High Fix reported
Prototype Pollution in lodashCVE-2018-16487 · GHSA-4XC9-XHRJ-V574 lodashLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 npmRed HatRubyGems High Fix reported
Arbitrary File Overwrite in fstreamCVE-2019-13173 · GHSA-XF7W-R453-M56C fstreamRed Hat Mobile Application Platform 4/nodejs-fstream npmRed Hat High Fix reported
Prototype Pollution in set-valueCVE-2021-23440 · GHSA-4JQC-8M5R-9RPR set-valueset-value-nuget npmNuGetRed Hat High Fix reported
Regular Expression Denial of Service in ua-parser-jsCVE-2020-7733 · GHSA-662X-FHQG-9P8V ua-parser-jsDistributed Tracing Jaeger 1/distributed-tracing/jaeger-all-in-one-rhel7 npmRed Hat High Fix reported
ua-parser-js Regular Expression Denial of Service vulnerabilityCVE-2020-7793 · GHSA-394C-5J6W-4XMX ua-parser-jsDistributed Tracing Jaeger 1/distributed-tracing/jaeger-all-in-one-rhel7 npmRed Hat High Fix reported
Prototype Pollution in set-valueCVE-2019-10747 · GHSA-4G88-FPPR-53PP set-valueRed Hat Enterprise Linux 8/nodejs:10/nodejs-nodemon npmRed Hat Critical Fix reported
Prototype Pollution in mixin-deepCVE-2019-10746 · GHSA-FHJF-83WG-R2J9 mixin-deepRed Hat Enterprise Linux 8/nodejs:10/nodejs-nodemon npmRed Hat Critical Fix reported
Validation Bypass in kind-ofCVE-2019-20149 · GHSA-6C8F-QPHG-QJGP kind-ofLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 npmRed Hat High Fix reported