| XSS in jQuery as used in Drupal, Backdrop CMS, and other productsCVE-2019-11358 · DRUPAL-CORE-2019-006Version ranges need review. |
drupal/coremaximebf/debugbar |
ComposerMavennpmNuGetPyPIRed HatRubyGems |
Medium
|
Fix reported |
|
| Prometheus Exporter-Toolkit is vulnerable to authentication bypassCVE-2022-46146 · GHSA-7RG2-CXVP-9P7PVersion ranges need review. |
github.com/prometheus/exporter-toolkitRed Hat Enterprise Linux 9/grafana |
GoRed Hat |
Medium
|
Fix reported |
|
| Uncontrolled Resource Consumption in promhttpCVE-2022-21698 · GHSA-CG3Q-J54F-5P7PVersion ranges need review. |
github.com/prometheus/client_golangCost Management Metrics Operator/costmanagement-metrics-operator-container |
GoRed Hat |
High
|
Fix reported |
|
| dot-prop Prototype Pollution vulnerabilityCVE-2020-8116 · GHSA-FF7X-QRG7-QGGM |
dot-propOpenShift Service Mesh 1/servicemesh-grafana |
npmRed Hat |
High
|
Fix reported |
|
| Exposure of Sensitive Information to an Unauthorized Actor in follow-redirectsCVE-2022-0536 · GHSA-PW2R-VQ6V-HR8C |
follow-redirects.NET Core 3.1 on Red Hat Enterprise Linux/rh-dotnet31-dotnet |
npmRed Hat |
Medium
|
Fix reported |
|
| axios Inefficient Regular Expression Complexity vulnerabilityCVE-2021-3749 · GHSA-CPH5-M8F7-6C5X |
axiosOpenShift Service Mesh 1/kiali |
npmRed Hat |
High
|
Fix reported |
|
| Inefficient Regular Expression Complexity in nth-checkCVE-2021-3803 · GHSA-RP65-9CF3-CJXR |
nth-checkOpenShift Service Mesh 1/servicemesh-grafana |
npmRed Hat |
High
|
Fix reported |
|
| Inefficient Regular Expression Complexity in chalk/ansi-regexCVE-2021-3807 · GHSA-93Q8-GQ69-WQMW |
ansi-regexMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 |
npmRed Hat |
High
|
Fix reported |
|
| Uncontrolled Resource Consumption in trim-newlinesCVE-2021-33623 · GHSA-7P7H-4MM5-852V |
trim-newlinesOpenShift Service Mesh 2.0/servicemesh-grafana |
npmRed Hat |
High
|
Fix reported |
|
| Regular Expression Denial of Service in browserslistCVE-2021-23364 · GHSA-W8QV-6JWH-64R5 |
browserslistOpenShift Service Mesh 2.0/servicemesh-grafana |
npmRed Hat |
Medium
|
Fix reported |
|
| golang.org/x/text Infinite loopCVE-2020-14040 · GHSA-5RCV-M4M3-HFH7Version ranges need review. |
golang.org/x/textOpenShift Developer Tools and Services/jenkins-operator-container |
GoRed Hat |
Medium
|
Fix reported |
|
| HashiCorp Consul does not properly validate node or segment names prior to usage in JWT claim assertionsCVE-2021-41803 · GHSA-HR3V-8CP3-68RFVersion ranges need review. |
github.com/hashicorp/consulRed Hat OpenShift Container Platform 4/openshift4/ose-grafana |
GoRed Hat |
High
|
Fix reported |
|
| Path traversal in Grafana LokiCVE-2021-36156 · GHSA-GRJ5-8X6Q-HC9Q |
github.com/grafana/lokiOpenShift Service Mesh 2.1/servicemesh-grafana |
GoRed Hat |
Medium
|
Fix reported |
|
| Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic linksCVE-2021-37701 · GHSA-9R2W-394V-53QC |
tarOpenShift Service Mesh 2.0/servicemesh-grafana |
npmRed Hat |
High
|
Fix reported |
|
| Arbitrary File Creation/Overwrite due to insufficient absolute path sanitizationCVE-2021-32804 · GHSA-3JFQ-G458-7QM9 |
tarOpenShift Service Mesh 2.0/servicemesh-grafana |
npmRed Hat |
High
|
Fix reported |
|
| Regular Expression Denial of Service (ReDoS) in PrismCVE-2021-32723 · GHSA-GJ77-59WH-66HG |
prismjsOpenShift Service Mesh 1/servicemesh-grafana |
npmRed Hat |
High
|
Fix reported |
|
| Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic linksCVE-2021-37712 · GHSA-QQ89-HQ3F-393P |
tarOpenShift Service Mesh 2.0/servicemesh-grafana |
npmRed Hat |
High
|
Fix reported |
|
| ReDoS in Sec-Websocket-Protocol headerCVE-2021-32640 · GHSA-6FC8-4GX4-V693 |
wsOpenShift Service Mesh 2.0/servicemesh-grafana |
npmRed Hat |
Medium
|
Fix reported |
|
| Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoningCVE-2021-32803 · GHSA-R628-MHMH-QJHW |
tarOpenShift Service Mesh 2.0/servicemesh-grafana |
npmRed Hat |
High
|
Fix reported |
|
| github.com/russellhaering/goxmldsig vulnerable to Signature Validation BypassCVE-2020-15216 · GHSA-Q547-GMF8-8JR7Version ranges need review. |
github.com/russellhaering/goxmldsigOpenShift Service Mesh 1/servicemesh-grafana |
GoRed Hat |
Medium
|
Fix reported |
|
