Security
فارسی
All products

Red Hat OpenShift Container Platform 4/openshift4/ose-metering-presto

Red Hat · Package
28 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Command Injection in lodashCVE-2021-23337 · GHSA-35JH-R3H4-6JHM lodash-eslodash-template npmRed HatRubyGems High Fix reported
Local Information Disclosure Vulnerability in Netty on Unix-Like systemsCVE-2021-21290 · GHSA-5MCR-GQ6C-3HQ2 io.netty:netty-codec-httpio.netty:netty MavenRed Hat Medium Fix reported
A potential Denial of Service issue in protobuf-javaCVE-2021-22569 · GHSA-WRVW-HG22-4M67 com.google.protobuf:protobuf-javacom.google.protobuf:protobuf-kotlin MavenRed HatRubyGems High Fix reported
Improper Check for Unusual or Exceptional Conditions in json-smartCVE-2021-27568 · GHSA-V528-7HRM-FRQP net.minidev:json-smart-mininet.minidev:json-smart MavenRed Hat Medium Fix reported
Jetty Utility Servlets ConcatServlet Double Decoding Information Disclosure VulnerabilityCVE-2021-28169 · GHSA-GWCR-J4WH-J3CQ org.eclipse.jetty:jetty-servletsRed Hat Enterprise Linux 7/jetty MavenRed Hat Medium Fix reported
Cross-site scripting in Apache HttpClientCVE-2020-13956 · GHSA-7R82-7XV7-XCPJ org.apache.httpcomponents:httpclientRed Hat BPM Suite 6/httpclient MavenRed Hat Medium Fix reported
Possible request smuggling in HTTP/2 due missing validation of content-lengthCVE-2021-21409 · GHSA-F256-J965-7F32 io.netty:netty-codec-http2io.netty:netty MavenRed Hat Medium Fix reported
HTTP request smuggling in nettyCVE-2021-43797 · GHSA-WX5J-54MM-RQQQ io.netty:netty-codec-httpio.netty:netty MavenRed Hat Medium Fix reported
XML External Entity (XXE) Injection in Jackson DatabindCVE-2020-25649 · GHSA-288C-CQ4H-88GQ com.fasterxml.jackson.core:jackson-databindA-MQ Clients 2/jackson-databind MavenRed Hat High Fix reported
Local Information Disclosure Vulnerability in io.netty:netty-codec-httpCVE-2022-24823 · GHSA-269Q-HMXG-M83Q io.netty:netty-codec-httpLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch6-rhel8 MavenRed Hat Medium Fix reported
SessionListener can prevent a session from being invalidated breaking logoutCVE-2021-34428 · GHSA-M6CP-VXJX-65J6 org.eclipse.jetty:jetty-serverRed Hat Enterprise Linux 7/jetty MavenRed Hat Low Fix reported
RCE in H2 ConsoleCVE-2021-42392 · GHSA-H376-J262-VHQ6 com.h2database:h2Red Hat BPM Suite 6/h2 MavenRed Hat Critical Fix reported
SQL Injection in Log4j 1.2.xCVE-2022-23305 · GHSA-65FG-84F6-3JQ3 log4j:log4jorg.zenframework.z8.dependencies.commons:log4j-1.2.17 MavenRed Hat Critical No fix reported
Information Disclosure in GuavaCVE-2020-8908 · GHSA-5MG8-W23W-74H3 com.google.guava:guavaRed Hat Enterprise Linux 7/guava MavenRed Hat Low Fix reported
Regular Expression Denial of Service (ReDoS) in lodashCVE-2020-28500 · GHSA-29MW-WPGM-HMR9 lodash-eslodash.trim npmRed HatRubyGems Medium Fix reported
Deserialization of Untrusted Data in Log4j 1.xCVE-2022-23302 · GHSA-W9P3-5CR8-M3JJ log4j:log4jorg.zenframework.z8.dependencies.commons:log4j-1.2.17 MavenRed Hat High No fix reported
Apache Hadoop heap overflow before v2.10.2, v3.2.3, v3.3.2CVE-2021-37404 · GHSA-RMPJ-7C96-MRG8 org.apache.hadoop:hadoop-commonRed Hat JBoss Fuse 6/hadoop-hdfs MavenRed Hat Critical Fix reported
Buffer not correctly recycled in Gzip Request inflationCVE-2020-27218 · GHSA-86WM-RRJM-8WH8 org.eclipse.jetty:jetty-serverRed Hat Enterprise Linux 8/jetty MavenRed Hat Medium Fix reported
node-fetch forwards secure headers to untrusted sitesCVE-2022-0235 · GHSA-R683-J2X4-V87G node-fetch.NET Core 3.1 on Red Hat Enterprise Linux/rh-dotnet31-dotnet npmRed Hat High Fix reported
Deserialization of Untrusted Data in Apache Log4jCVE-2022-23307 · GHSA-F7VH-QWP3-X37M log4j:log4jorg.zenframework.z8.dependencies.commons:log4j-1.2.17 MavenRed Hat Critical No fix reported