Security
فارسی
All products

OpenShift Service Mesh 2.0/servicemesh-grafana

Red Hat · Package
97 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Command Injection in lodashCVE-2021-23337 · GHSA-35JH-R3H4-6JHM lodash-eslodash-template npmRed HatRubyGems High Fix reported
Got allows a redirect to a UNIX socketCVE-2022-33987 · GHSA-PFRX-2Q88-QQ97 got.NET 6.0 on Red Hat Enterprise Linux/rh-dotnet60-dotnet npmRed HatWordPress Medium Fix reported
minimatch ReDoS vulnerabilityCVE-2022-3517 · GHSA-F8Q6-P94X-37V3 minimatchMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed Hat High Fix reported
x/crypto/ssh vulnerable to panic via malformed packetsCVE-2021-43565 · GHSA-GWC9-M7RH-J2WWVersion ranges need review. golang.org/x/cryptoMigration Toolkit for Containers/rhmtc/openshift-migration-velero-rhel8 GoRed Hat High Fix reported
Moment.js vulnerable to Inefficient Regular Expression ComplexityCVE-2022-31129 · GHSA-WC69-RHJR-HC9G momentmoment.js npmNuGetRed Hat High Fix reported
Race Condition in GruntCVE-2022-1537 · GHSA-RM36-94G8-835R gruntOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat High Fix reported
angular vulnerable to regular expression denial of service (ReDoS)CVE-2022-25844 · GHSA-M2H2-264F-F486 angularOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat Medium No fix reported
Uncontrolled Resource Consumption in promhttpCVE-2022-21698 · GHSA-CG3Q-J54F-5P7PVersion ranges need review. github.com/prometheus/client_golangCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat High Fix reported
Path Traversal: 'dir/../../filename' in moment.localeCVE-2022-24785 · GHSA-8HFJ-J24R-96C4 momentmoment.js npmNuGetRed Hat High Fix reported
Remote code execution in handlebars when compiling templatesCVE-2021-23369 · GHSA-F2JV-R9RF-7988 org.webjars.bowergithub.wycats:handlebars.jsorg.webjars.npm:handlebars MavennpmRed Hat Critical Fix reported
Exposure of Sensitive Information to an Unauthorized Actor in follow-redirectsCVE-2022-0536 · GHSA-PW2R-VQ6V-HR8C follow-redirects.NET Core 3.1 on Red Hat Enterprise Linux/rh-dotnet31-dotnet npmRed Hat Medium Fix reported
Prototype Pollution in handlebarsCVE-2021-23383 · GHSA-765H-QJXV-5F44 handlebarsOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat Critical Fix reported
Inefficient Regular Expression Complexity in markedCVE-2022-21680 · GHSA-RRRM-QJM4-V8HF markedOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat High Fix reported
Inefficient Regular Expression Complexity in markedCVE-2022-21681 · GHSA-5V2H-R2CX-5XGJ markedOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat High Fix reported
axios Inefficient Regular Expression Complexity vulnerabilityCVE-2021-3749 · GHSA-CPH5-M8F7-6C5X axiosOpenShift Service Mesh 1/kiali npmRed Hat High Fix reported
Inefficient Regular Expression Complexity in nth-checkCVE-2021-3803 · GHSA-RP65-9CF3-CJXR nth-checkOpenShift Service Mesh 1/servicemesh-grafana npmRed Hat High Fix reported
Inefficient Regular Expression Complexity in chalk/ansi-regexCVE-2021-3807 · GHSA-93Q8-GQ69-WQMW ansi-regexMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed Hat High Fix reported
Uncontrolled Resource Consumption in trim-newlinesCVE-2021-33623 · GHSA-7P7H-4MM5-852V trim-newlinesOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat High Fix reported
Regular Expression Denial of Service in browserslistCVE-2021-23364 · GHSA-W8QV-6JWH-64R5 browserslistOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat Medium Fix reported
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic linksCVE-2021-37701 · GHSA-9R2W-394V-53QC tarOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat High Fix reported