Security
فارسی
All products

OpenShift Service Mesh 2.0/servicemesh-prometheus

Red Hat · Package
67 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Command Injection in lodashCVE-2021-23337 · GHSA-35JH-R3H4-6JHM lodash-eslodash-template npmRed HatRubyGems High Fix reported
minimatch ReDoS vulnerabilityCVE-2022-3517 · GHSA-F8Q6-P94X-37V3 minimatchMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed Hat High Fix reported
x/crypto/ssh vulnerable to panic via malformed packetsCVE-2021-43565 · GHSA-GWC9-M7RH-J2WWVersion ranges need review. golang.org/x/cryptoMigration Toolkit for Containers/rhmtc/openshift-migration-velero-rhel8 GoRed Hat High Fix reported
hoek subject to prototype pollution via the clone function.CVE-2020-36604 · GHSA-C429-5P7V-VGJP @hapi/hoekhoek npmRed Hat High Fix reported
Uncontrolled Resource Consumption in promhttpCVE-2022-21698 · GHSA-CG3Q-J54F-5P7PVersion ranges need review. github.com/prometheus/client_golangCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat High Fix reported
Remote code execution in handlebars when compiling templatesCVE-2021-23369 · GHSA-F2JV-R9RF-7988 org.webjars.bowergithub.wycats:handlebars.jsorg.webjars.npm:handlebars MavennpmRed Hat Critical Fix reported
Exposure of Sensitive Information to an Unauthorized Actor in follow-redirectsCVE-2022-0536 · GHSA-PW2R-VQ6V-HR8C follow-redirects.NET Core 3.1 on Red Hat Enterprise Linux/rh-dotnet31-dotnet npmRed Hat Medium Fix reported
Prototype Pollution in handlebarsCVE-2021-23383 · GHSA-765H-QJXV-5F44 handlebarsOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat Critical Fix reported
Inefficient Regular Expression Complexity in nth-checkCVE-2021-3803 · GHSA-RP65-9CF3-CJXR nth-checkOpenShift Service Mesh 1/servicemesh-grafana npmRed Hat High Fix reported
Inefficient Regular Expression Complexity in chalk/ansi-regexCVE-2021-3807 · GHSA-93Q8-GQ69-WQMW ansi-regexMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed Hat High Fix reported
Regular Expression Denial of Service in browserslistCVE-2021-23364 · GHSA-W8QV-6JWH-64R5 browserslistOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat Medium Fix reported
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic linksCVE-2021-37701 · GHSA-9R2W-394V-53QC tarOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat High Fix reported
Arbitrary File Creation/Overwrite due to insufficient absolute path sanitizationCVE-2021-32804 · GHSA-3JFQ-G458-7QM9 tarOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat High Fix reported
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic linksCVE-2021-37712 · GHSA-QQ89-HQ3F-393P tarOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat High Fix reported
ReDoS in Sec-Websocket-Protocol headerCVE-2021-32640 · GHSA-6FC8-4GX4-V693 wsOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat Medium Fix reported
url-parse Incorrectly parses URLs that include an '@'CVE-2022-0639 · GHSA-8V38-PW62-9CW2 url-parseOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat Medium Fix reported
golang.org/x/sys/unix has Incorrect privilege reporting in syscallCVE-2022-29526 · GHSA-P782-XGP4-8HR8Version ranges need review. golang.org/x/sysstdlib GoRed Hat Medium Fix reported
Improper Input Validation in GoGo ProtobufCVE-2021-3121 · GHSA-C3H9-896R-86JMVersion ranges need review. github.com/gogo/protobufOpenShift Service Mesh 2.0/servicemesh-cni GoRed Hat High Fix reported
golang.org/x/net/http/httpguts vulnerable to Uncontrolled RecursionCVE-2021-31525 · GHSA-H86H-8PPG-MXMHVersion ranges need review. golang.org/x/netstdlib GoRed Hat Medium Fix reported
url-parse incorrectly parses hostname / protocol due to unstripped leading control characters.CVE-2022-0691 · GHSA-JF5R-8HM2-F872 url-parseOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat Medium Fix reported