Security
فارسی
All products

Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/search-api-rhel8

Red Hat · Package
30 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Command Injection in lodashCVE-2021-23337 · GHSA-35JH-R3H4-6JHM lodash-eslodash-template npmRed HatRubyGems High Fix reported
semver vulnerable to Regular Expression Denial of ServiceCVE-2022-25883 · GHSA-C2QF-RXJJ-QQGW semverMigration Toolkit for Applications 6/mta/mta-ui-rhel9 npmRed Hat High Fix reported
tough-cookie Prototype Pollution vulnerabilityCVE-2023-26136 · GHSA-72XF-G2V4-QVF3 tough-cookieMigration Toolkit for Applications 6/mta/mta-ui-rhel9 npmRed Hat Medium Fix reported
minimatch ReDoS vulnerabilityCVE-2022-3517 · GHSA-F8Q6-P94X-37V3 minimatchMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed Hat High Fix reported
Moment.js vulnerable to Inefficient Regular Expression ComplexityCVE-2022-31129 · GHSA-WC69-RHJR-HC9G momentmoment.js npmNuGetRed Hat High Fix reported
Path Traversal: 'dir/../../filename' in moment.localeCVE-2022-24785 · GHSA-8HFJ-J24R-96C4 momentmoment.js npmNuGetRed Hat High Fix reported
semver-regex Regular Expression Denial of Service (ReDOS)CVE-2021-3795 · GHSA-44C6-4V22-4MHX semver-regexRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/console-api-rhel8 npmRed Hat High Fix reported
Inefficient Regular Expression Complexity in chalk/ansi-regexCVE-2021-3807 · GHSA-93Q8-GQ69-WQMW ansi-regexMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed Hat High Fix reported
Regular Expression Denial of Service in browserslistCVE-2021-23364 · GHSA-W8QV-6JWH-64R5 browserslistOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat Medium Fix reported
ReDoS in Sec-Websocket-Protocol headerCVE-2021-32640 · GHSA-6FC8-4GX4-V693 wsOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat Medium Fix reported
qs vulnerable to Prototype PollutionCVE-2022-24999 · GHSA-HRPP-H998-J3PP qs.NET Core 3.1 on Red Hat Enterprise Linux/rh-dotnet31-dotnet npmRed Hat High Fix reported
cookiejar Regular Expression Denial of Service via Cookie.parse functionCVE-2022-25901 · GHSA-H452-7996-H45H org.webjars.npm:cookiejarcookiejar MavennpmRed Hat Medium Fix reported
word-wrap vulnerable to Regular Expression Denial of ServiceCVE-2023-26115 · GHSA-J8XG-FQG3-53R7 word-wrapMigration Toolkit for Applications 6/mta/mta-ui-rhel9 npmRed Hat Medium Fix reported
json-schema is vulnerable to Prototype PollutionCVE-2021-3918 · GHSA-896R-F27R-55MW json-schemaMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed Hat Critical Fix reported
Prototype Pollution in set-valueCVE-2021-23440 · GHSA-4JQC-8M5R-9RPR set-valueset-value-nuget npmNuGetRed Hat High Fix reported
Prototype Pollution in object-pathCVE-2021-23434 · GHSA-V39P-96QG-C8RF object-pathOpenShift Service Mesh 1/servicemesh-prometheus npmRed Hat Medium Fix reported
glob-parent vulnerable to Regular Expression Denial of Service in enclosure regexCVE-2020-28469 · GHSA-WW39-953V-WCQ6 glob-parentOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat High Fix reported
Prototype Pollution in nconfCVE-2022-21803 · GHSA-6XWR-Q98W-RVG7 nconfRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/application-ui-rhel8 npmRed Hat High Fix reported
Crash in HeaderParser in dicerCVE-2022-24434 · GHSA-WM7H-9275-46V2 org.webjars.npm:dicerdicer MavennpmRed Hat High No fix reported
Prototype Pollution in object-pathCVE-2021-3805 · GHSA-8V63-CQQC-6R2C object-pathOpenShift Service Mesh 1/servicemesh-prometheus npmRed Hat High Fix reported