Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat OpenShift distributed tracing 2/rhosdt/jaeger-query-rhel8
Red Hat
· Package
20 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
HTTP/2 rapid reset can cause excessive work in net/http
CVE-2023-39325 · GHSA-4374-P667-P6C8
Version ranges need review.
golang.org/x/net
stdlib
Go
Red Hat
High
Fix reported
2026-09-28
Express.js Open Redirect in malformed URLs
CVE-2024-29041 · GHSA-RV95-896H-C2VC
express
A-MQ Interconnect 1/qpid-dispatch
npm
Red Hat
Medium
Fix reported
2026-09-10
browserify-sign upper bound check issue in `dsaVerify` leads to a signature forgery attack
CVE-2023-46234 · GHSA-X9W5-V3Q2-3RHW
browserify-sign
OpenShift Pipelines/openshift-pipelines/pipelines-hub-api-rhel8
npm
Red Hat
High
Fix reported
2026-09-10
Follow Redirects improperly handles URLs in the url.parse() function
CVE-2023-26159 · GHSA-JCHW-25XP-JWWC
follow-redirects
Cryostat 2/follow-redirects
npm
Red Hat
Medium
Fix reported
2026-09-10
http-cache-semantics vulnerable to Regular Expression Denial of Service
CVE-2022-25881 · GHSA-RC47-6667-2J5J
org.webjars.npm:http-cache-semantics
http-cache-semantics
Maven
npm
Red Hat
WordPress
High
Fix reported
2026-09-10
minimatch ReDoS vulnerability
CVE-2022-3517 · GHSA-F8Q6-P94X-37V3
minimatch
Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8
npm
Red Hat
High
Fix reported
2026-09-10
Prototype pollution in webpack loader-utils
CVE-2022-37601 · GHSA-76P3-8JX3-JPFQ
loader-utils
Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8
npm
Red Hat
WordPress
Critical
Fix reported
2026-09-10
Moment.js vulnerable to Inefficient Regular Expression Complexity
CVE-2022-31129 · GHSA-WC69-RHJR-HC9G
moment
moment.js
npm
NuGet
Red Hat
High
Fix reported
2026-09-10
OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metrics
CVE-2023-45142 · GHSA-RCJV-MGP8-QVMR
Version ranges need review.
go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin
Go
Red Hat
High
Fix reported
2026-09-10
Exposure of Sensitive Information to an Unauthorized Actor in follow-redirects
CVE-2022-0536 · GHSA-PW2R-VQ6V-HR8C
follow-redirects
.NET Core 3.1 on Red Hat Enterprise Linux/rh-dotnet31-dotnet
npm
Red Hat
Medium
Fix reported
2026-09-10
ReDoS Vulnerability in ua-parser-js version
CVE-2022-25927 · GHSA-FHG7-M89Q-25R3
ua-parser-js
OpenShift Service Mesh 2.1/servicemesh-grafana
npm
Red Hat
High
Fix reported
2025-10-17
Improper Verification of Cryptographic Signature in node-forge
CVE-2022-24772 · GHSA-X4JG-MJRX-434G
node-forge
Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8
npm
Red Hat
High
Fix reported
2025-02-12
Improper Verification of Cryptographic Signature in node-forge
CVE-2022-24771 · GHSA-CFM4-QJH2-4765
node-forge
Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8
npm
Red Hat
High
Fix reported
2025-02-12
json-schema is vulnerable to Prototype Pollution
CVE-2021-3918 · GHSA-896R-F27R-55MW
json-schema
Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8
npm
Red Hat
Critical
Fix reported
2025-01-18
Prototype Pollution in async
CVE-2021-43138 · GHSA-FWR7-V2MV-HH25
async
Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8
npm
Red Hat
WordPress
High
Fix reported
2024-06-25
loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS) via url variable
CVE-2022-37603 · GHSA-3RFM-JHWJ-7488
loader-utils
Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8
npm
Red Hat
WordPress
High
Fix reported
2024-01-22
node-fetch forwards secure headers to untrusted sites
CVE-2022-0235 · GHSA-R683-J2X4-V87G
node-fetch
.NET Core 3.1 on Red Hat Enterprise Linux/rh-dotnet31-dotnet
npm
Red Hat
High
Fix reported
2023-11-30
Improper Verification of Cryptographic Signature in `node-forge`
CVE-2022-24773 · GHSA-2R2C-G63R-VCCR
node-forge
Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8
npm
Red Hat
Medium
Fix reported
2023-11-08
Cross site scripting in parse-url
CVE-2022-2217 · GHSA-Q6WQ-5P59-983W
parse-url
Red Hat Decision Manager 7/parse-url
npm
Red Hat
Medium
Fix reported
2023-11-08
uglify-js: Prototype pollution vulnerability in function DEFNODE in ast.js
CVE-2022-37598
Migration Toolkit for Runtimes/uglify-js
OpenShift Service Mesh 2.0/openshift-service-mesh/kiali-rhel8
Red Hat
Medium
No fix reported
Not recorded
