Security
فارسی
All products

Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/search-ui-rhel8

Red Hat · Package
42 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
minimatch ReDoS vulnerabilityCVE-2022-3517 · GHSA-F8Q6-P94X-37V3 minimatchMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed Hat High Fix reported
Moment.js vulnerable to Inefficient Regular Expression ComplexityCVE-2022-31129 · GHSA-WC69-RHJR-HC9G momentmoment.js npmNuGetRed Hat High Fix reported
Path Traversal: 'dir/../../filename' in moment.localeCVE-2022-24785 · GHSA-8HFJ-J24R-96C4 momentmoment.js npmNuGetRed Hat High Fix reported
Exposure of Sensitive Information to an Unauthorized Actor in follow-redirectsCVE-2022-0536 · GHSA-PW2R-VQ6V-HR8C follow-redirects.NET Core 3.1 on Red Hat Enterprise Linux/rh-dotnet31-dotnet npmRed Hat Medium Fix reported
Exposure of sensitive information in follow-redirectsCVE-2022-0155 · GHSA-74FJ-2J2H-C42Q follow-redirectsOpenShift Service Mesh 1/npm-follow-redirects npmRed Hat High Fix reported
axios Inefficient Regular Expression Complexity vulnerabilityCVE-2021-3749 · GHSA-CPH5-M8F7-6C5X axiosOpenShift Service Mesh 1/kiali npmRed Hat High Fix reported
Uncontrolled Resource Consumption in trim-newlinesCVE-2021-33623 · GHSA-7P7H-4MM5-852V trim-newlinesOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat High Fix reported
Regular Expression Denial of Service in browserslistCVE-2021-23364 · GHSA-W8QV-6JWH-64R5 browserslistOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat Medium Fix reported
Prefix escapeCVE-2021-21321 · GHSA-QMW8-3V4G-GWJ4 fastify-reply-fromRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/search-ui-rhel8 npmRed Hat Critical Fix reported
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic linksCVE-2021-37701 · GHSA-9R2W-394V-53QC tarOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat High Fix reported
Arbitrary File Creation/Overwrite due to insufficient absolute path sanitizationCVE-2021-32804 · GHSA-3JFQ-G458-7QM9 tarOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat High Fix reported
Prefix escapeCVE-2021-21322 · GHSA-C4QR-GMR9-V23W fastify-http-proxyRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/search-ui-rhel8 npmRed Hat Low Fix reported
ReDoS in Sec-Websocket-Protocol headerCVE-2021-32640 · GHSA-6FC8-4GX4-V693 wsOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat Medium Fix reported
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoningCVE-2021-32803 · GHSA-R628-MHMH-QJHW tarOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat High Fix reported
undici before v5.8.0 vulnerable to uncleared cookies on cross-host / cross-origin redirectCVE-2022-31151 · GHSA-Q768-X9M6-M9QP undiciRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/search-ui-rhel8 npmRed Hat Low Fix reported
Exposure of Sensitive Information to an Unauthorized Actor in nanoidCVE-2021-23566 · GHSA-QRPM-P2H7-HRV2 nanoidMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed Hat Medium Fix reported
Arbitrary Code Execution in underscoreCVE-2021-23358 · GHSA-CF4H-3JHX-XVHQ underscoreRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/grc-ui-rhel8 npmRed Hat Critical Fix reported
qs vulnerable to Prototype PollutionCVE-2022-24999 · GHSA-HRPP-H998-J3PP qs.NET Core 3.1 on Red Hat Enterprise Linux/rh-dotnet31-dotnet npmRed Hat High Fix reported
Denial of service in css-whatCVE-2021-33587 · GHSA-Q8PJ-2VQX-8GGC css-whatOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat High Fix reported
Uncontrolled Resource Consumption in ansi-htmlCVE-2021-23424 · GHSA-WHGM-JR23-G3J9 ansi-htmlOpenShift Service Mesh 1/servicemesh-prometheus npmRed Hat High Fix reported