Security
فارسی
All products

Red Hat OpenShift distributed tracing 2/rhosdt/jaeger-all-in-one-rhel8

Red Hat · Package
26 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
HTTP/2 rapid reset can cause excessive work in net/httpCVE-2023-39325 · GHSA-4374-P667-P6C8Version ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
Express.js Open Redirect in malformed URLsCVE-2024-29041 · GHSA-RV95-896H-C2VC expressA-MQ Interconnect 1/qpid-dispatch npmRed Hat Medium Fix reported
browserify-sign upper bound check issue in `dsaVerify` leads to a signature forgery attackCVE-2023-46234 · GHSA-X9W5-V3Q2-3RHW browserify-signOpenShift Pipelines/openshift-pipelines/pipelines-hub-api-rhel8 npmRed Hat High Fix reported
Follow Redirects improperly handles URLs in the url.parse() functionCVE-2023-26159 · GHSA-JCHW-25XP-JWWC follow-redirectsCryostat 2/follow-redirects npmRed Hat Medium Fix reported
http-cache-semantics vulnerable to Regular Expression Denial of ServiceCVE-2022-25881 · GHSA-RC47-6667-2J5J org.webjars.npm:http-cache-semanticshttp-cache-semantics MavennpmRed HatWordPress High Fix reported
minimatch ReDoS vulnerabilityCVE-2022-3517 · GHSA-F8Q6-P94X-37V3 minimatchMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed Hat High Fix reported
Prototype pollution in webpack loader-utilsCVE-2022-37601 · GHSA-76P3-8JX3-JPFQ loader-utilsMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed HatWordPress Critical Fix reported
Moment.js vulnerable to Inefficient Regular Expression ComplexityCVE-2022-31129 · GHSA-WC69-RHJR-HC9G momentmoment.js npmNuGetRed Hat High Fix reported
OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metricsCVE-2023-45142 · GHSA-RCJV-MGP8-QVMRVersion ranges need review. go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestfulgo.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin GoRed Hat High Fix reported
Exposure of Sensitive Information to an Unauthorized Actor in follow-redirectsCVE-2022-0536 · GHSA-PW2R-VQ6V-HR8C follow-redirects.NET Core 3.1 on Red Hat Enterprise Linux/rh-dotnet31-dotnet npmRed Hat Medium Fix reported
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic linksCVE-2021-37701 · GHSA-9R2W-394V-53QC tarOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat High Fix reported
ReDoS Vulnerability in ua-parser-js versionCVE-2022-25927 · GHSA-FHG7-M89Q-25R3 ua-parser-jsOpenShift Service Mesh 2.1/servicemesh-grafana npmRed Hat High Fix reported
Improper Verification of Cryptographic Signature in node-forgeCVE-2022-24772 · GHSA-X4JG-MJRX-434G node-forgeMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed Hat High Fix reported
Improper Verification of Cryptographic Signature in node-forgeCVE-2022-24771 · GHSA-CFM4-QJH2-4765 node-forgeMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed Hat High Fix reported
Terser insecure use of regular expressions leads to ReDoSCVE-2022-25858 · GHSA-4WF5-VPHF-C2XC terserMigration Toolkit for Containers/rhmtc/openshift-migration-ui-rhel8 npmRed HatWordPress High Fix reported
Prototype Pollution in set-valueCVE-2021-23440 · GHSA-4JQC-8M5R-9RPR set-valueset-value-nuget npmNuGetRed Hat High Fix reported
glob-parent vulnerable to Regular Expression Denial of Service in enclosure regexCVE-2020-28469 · GHSA-WW39-953V-WCQ6 glob-parentOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat High Fix reported
loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS) via url variableCVE-2022-37603 · GHSA-3RFM-JHWJ-7488 loader-utilsMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed HatWordPress High Fix reported
Prototype Pollution in set-valueCVE-2019-10747 · GHSA-4G88-FPPR-53PP set-valueRed Hat Enterprise Linux 8/nodejs:10/nodejs-nodemon npmRed Hat Critical Fix reported
Insecure serialization leading to RCE in serialize-javascriptCVE-2020-7660 · GHSA-HXCC-F52P-WC94 serialize-javascriptRed Hat OpenShift Container Platform 4/openshift4/ose-grafana npmRed Hat High Fix reported