All products

OpenShift Service Mesh 1/servicemesh-prometheus

Red Hat · Package
16 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
x/crypto/ssh vulnerable to panic via malformed packetsCVE-2021-43565 · GHSA-GWC9-M7RH-J2WWVersion ranges need review. golang.org/x/cryptoMigration Toolkit for Containers/rhmtc/openshift-migration-velero-rhel8 GoRed Hat High Fix reported
Inefficient Regular Expression Complexity in nth-checkCVE-2021-3803 · GHSA-RP65-9CF3-CJXR nth-checkOpenShift Service Mesh 1/servicemesh-grafana npmRed Hat High Fix reported
Inefficient Regular Expression Complexity in chalk/ansi-regexCVE-2021-3807 · GHSA-93Q8-GQ69-WQMW ansi-regexMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed Hat High Fix reported
Authorization bypass in github.com/dgrijalva/jwt-goCVE-2020-26160 · GHSA-W73W-5M7G-F7QCVersion ranges need review. github.com/dgrijalva/jwt-go/v4github.com/dgrijalva/jwt-go GoRed Hat High Fix reported
Uncontrolled Resource Consumption in ansi-htmlCVE-2021-23424 · GHSA-WHGM-JR23-G3J9 ansi-htmlOpenShift Service Mesh 1/servicemesh-prometheus npmRed Hat High Fix reported
Prototype Pollution in set-valueCVE-2021-23440 · GHSA-4JQC-8M5R-9RPR set-valueset-value-nuget npmNuGetRed Hat High Fix reported
Prototype Pollution in object-pathCVE-2021-23434 · GHSA-V39P-96QG-C8RF object-pathOpenShift Service Mesh 1/servicemesh-prometheus npmRed Hat Medium Fix reported
Regular Expression Denial of Service in path-parseCVE-2021-23343 · GHSA-HJ48-42VR-X3V9 path-parseOpenShift Service Mesh 1/kiali npmRed Hat Medium Fix reported
OS Command Injection in node-notifierCVE-2020-7789 · GHSA-5FW9-FQ32-WV5P node-notifierOpenShift Service Mesh 1/kiali npmRed Hat Medium Fix reported
Panic during division of very large numbers in math/bigCVE-2020-28362 · GO-2021-0069 stdlibOpenShift Serverless/knative-serving GoRed Hat Medium Fix reported
Incorrect operations on the P-224 curve in crypto/ellipticCVE-2021-3114 · GO-2021-0235 stdlibOpenShift Serverless/knative-eventing GoRed Hat Medium Fix reported
Prototype Pollution in immerCVE-2021-3757 · GHSA-C36V-FMGQ-M8HX immerOpenShift Service Mesh 1/servicemesh-grafana npmRed Hat High Fix reported
Prototype Pollution in object-pathCVE-2021-3805 · GHSA-8V63-CQQC-6R2C object-pathOpenShift Service Mesh 1/servicemesh-prometheus npmRed Hat High Fix reported
Prototype pollution in Merge-deepCVE-2021-26707 · GHSA-R6RJ-9CH6-G264 merge-deepOpenShift Service Mesh 1/servicemesh-prometheus npmRed Hat Critical Fix reported
ReDOS in IS-SVGCVE-2021-29059 · GHSA-R8J5-H5CX-65GG is-svgOpenShift Service Mesh 1/servicemesh-grafana npmRed Hat High Fix reported
Regular Expression Denial of Service (ReDOS)CVE-2021-29060 · GHSA-257V-VJ4P-3W2H color-stringOpenShift Service Mesh 1/servicemesh-grafana npmRed Hat Medium Fix reported