Security
فارسی
All products

OpenShift Service Mesh 2.1/openshift-service-mesh/kiali-rhel8

Red Hat · Package
27 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Kiali content spoofing vulnerabilityCVE-2022-3962 · GHSA-6F4M-J56W-55C3Version ranges need review. github.com/kiali/kialiOpenShift Service Mesh 2.1/openshift-service-mesh/kiali-rhel8 GoRed Hat Medium Fix reported
Prototype Pollution in JSON5 via Parse MethodCVE-2022-46175 · GHSA-9C47-M6QQ-7P4H json5Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed HatWordPress High Fix reported
Got allows a redirect to a UNIX socketCVE-2022-33987 · GHSA-PFRX-2Q88-QQ97 got.NET 6.0 on Red Hat Enterprise Linux/rh-dotnet60-dotnet npmRed HatWordPress Medium Fix reported
http-cache-semantics vulnerable to Regular Expression Denial of ServiceCVE-2022-25881 · GHSA-RC47-6667-2J5J org.webjars.npm:http-cache-semanticshttp-cache-semantics MavennpmRed HatWordPress High Fix reported
minimatch ReDoS vulnerabilityCVE-2022-3517 · GHSA-F8Q6-P94X-37V3 minimatchMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed Hat High Fix reported
Prototype pollution in webpack loader-utilsCVE-2022-37601 · GHSA-76P3-8JX3-JPFQ loader-utilsMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed HatWordPress Critical Fix reported
hoek subject to prototype pollution via the clone function.CVE-2020-36604 · GHSA-C429-5P7V-VGJP @hapi/hoekhoek npmRed Hat High Fix reported
Uncontrolled Resource Consumption in promhttpCVE-2022-21698 · GHSA-CG3Q-J54F-5P7PVersion ranges need review. github.com/prometheus/client_golangCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat High Fix reported
golang.org/x/net/http2 vulnerable to possible excessive memory growthCVE-2022-41717 · GHSA-XRJJ-MJ9H-534MVersion ranges need review. golang.org/x/net/http2golang.org/x/net GoRed Hat Medium Fix reported
golang.org/x/net vulnerable to Uncontrolled Resource ConsumptionCVE-2022-41723 · GHSA-VVPX-J8F3-3W6HVersion ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS)CVE-2022-37599 · GHSA-HHQ3-FF78-JV3G loader-utilsMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed HatWordPress High Fix reported
qs vulnerable to Prototype PollutionCVE-2022-24999 · GHSA-HRPP-H998-J3PP qs.NET Core 3.1 on Red Hat Enterprise Linux/rh-dotnet31-dotnet npmRed Hat High Fix reported
glob-parent 6.0.0 vulnerable to Regular Expression Denial of ServiceCVE-2021-35065 · GHSA-CJ88-88MR-972W glob-parentMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed Hat High Fix reported
xml2js is vulnerable to prototype pollutionCVE-2023-0842 · GHSA-776F-QX25-Q3CC xml2jsOpenShift Service Mesh 2.1/openshift-service-mesh/kiali-rhel8 npmRed Hat Medium Fix reported
json-schema is vulnerable to Prototype PollutionCVE-2021-3918 · GHSA-896R-F27R-55MW json-schemaMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed Hat Critical Fix reported
Terser insecure use of regular expressions leads to ReDoSCVE-2022-25858 · GHSA-4WF5-VPHF-C2XC terserMigration Toolkit for Containers/rhmtc/openshift-migration-ui-rhel8 npmRed HatWordPress High Fix reported
JSZip contains Path Traversal via loadAsyncCVE-2022-48285 · GHSA-36FH-84J7-CV5H jszipOpenShift Service Mesh 2.1/openshift-service-mesh/kiali-rhel8 npmRed Hat Medium Fix reported
Prototype Pollution in asyncCVE-2021-43138 · GHSA-FWR7-V2MV-HH25 asyncMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed HatWordPress High Fix reported
Session tickets lack random ticket_age_add in crypto/tlsCVE-2022-30629 · GO-2022-0531 stdlibMigration Toolkit for Containers/cpma GoRed Hat Low Fix reported
decode-uri-component vulnerable to Denial of Service (DoS)CVE-2022-38900 · GHSA-W573-4HG7-7WGQ decode-uri-componentMigration Toolkit for Applications 6/mta/mta-ui-rhel9 npmRed HatWordPress High Fix reported