Security
فارسی
All products

Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/mcm-topology-rhel8

Red Hat · Package
23 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Moment.js vulnerable to Inefficient Regular Expression ComplexityCVE-2022-31129 · GHSA-WC69-RHJR-HC9G momentmoment.js npmNuGetRed Hat High Fix reported
Path Traversal: 'dir/../../filename' in moment.localeCVE-2022-24785 · GHSA-8HFJ-J24R-96C4 momentmoment.js npmNuGetRed Hat High Fix reported
Exposure of Sensitive Information to an Unauthorized Actor in follow-redirectsCVE-2022-0536 · GHSA-PW2R-VQ6V-HR8C follow-redirects.NET Core 3.1 on Red Hat Enterprise Linux/rh-dotnet31-dotnet npmRed Hat Medium Fix reported
Exposure of sensitive information in follow-redirectsCVE-2022-0155 · GHSA-74FJ-2J2H-C42Q follow-redirectsOpenShift Service Mesh 1/npm-follow-redirects npmRed Hat High Fix reported
Inefficient Regular Expression Complexity in nth-checkCVE-2021-3803 · GHSA-RP65-9CF3-CJXR nth-checkOpenShift Service Mesh 1/servicemesh-grafana npmRed Hat High Fix reported
Inefficient Regular Expression Complexity in chalk/ansi-regexCVE-2021-3807 · GHSA-93Q8-GQ69-WQMW ansi-regexMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed Hat High Fix reported
Uncontrolled Resource Consumption in trim-newlinesCVE-2021-33623 · GHSA-7P7H-4MM5-852V trim-newlinesOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat High Fix reported
Regular Expression Denial of Service in browserslistCVE-2021-23364 · GHSA-W8QV-6JWH-64R5 browserslistOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat Medium Fix reported
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic linksCVE-2021-37701 · GHSA-9R2W-394V-53QC tarOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat High Fix reported
Arbitrary File Creation/Overwrite due to insufficient absolute path sanitizationCVE-2021-32804 · GHSA-3JFQ-G458-7QM9 tarOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat High Fix reported
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic linksCVE-2021-37712 · GHSA-QQ89-HQ3F-393P tarOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat High Fix reported
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoningCVE-2021-32803 · GHSA-R628-MHMH-QJHW tarOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat High Fix reported
Denial of service in css-whatCVE-2021-33587 · GHSA-Q8PJ-2VQX-8GGC css-whatOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat High Fix reported
json-schema is vulnerable to Prototype PollutionCVE-2021-3918 · GHSA-896R-F27R-55MW json-schemaMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed Hat Critical Fix reported
Prototype Pollution in set-valueCVE-2021-23440 · GHSA-4JQC-8M5R-9RPR set-valueset-value-nuget npmNuGetRed Hat High Fix reported
Regular Expression Denial of Service in path-parseCVE-2021-23343 · GHSA-HJ48-42VR-X3V9 path-parseOpenShift Service Mesh 1/kiali npmRed Hat Medium Fix reported
glob-parent vulnerable to Regular Expression Denial of Service in enclosure regexCVE-2020-28469 · GHSA-WW39-953V-WCQ6 glob-parentOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat High Fix reported
Validation Bypass in kind-ofCVE-2019-20149 · GHSA-6C8F-QPHG-QJGP kind-ofLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 npmRed Hat High Fix reported
ejs template injection vulnerabilityCVE-2022-29078 · GHSA-PHWQ-J96M-2C2Q ejsMigration Toolkit for Containers/rhmtc/openshift-migration-ui-rhel8 npmRed Hat Critical Fix reported
Leading white space bypasses protocol validationCVE-2022-24723 · GHSA-GMV4-R438-P67F urijs.NET Core 3.1 on Red Hat Enterprise Linux/rh-dotnet31-dotnet npmRed Hat Medium Fix reported