Security
فارسی
All products

OpenShift Service Mesh 1/kiali

Red Hat · Package
14 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Axios vulnerable to Server-Side Request ForgeryCVE-2020-28168 · GHSA-4W2V-Q235-VP99 axiosOpenShift Service Mesh 1/kiali npmRed Hat Medium Fix reported
axios Inefficient Regular Expression Complexity vulnerabilityCVE-2021-3749 · GHSA-CPH5-M8F7-6C5X axiosOpenShift Service Mesh 1/kiali npmRed Hat High Fix reported
Inefficient Regular Expression Complexity in chalk/ansi-regexCVE-2021-3807 · GHSA-93Q8-GQ69-WQMW ansi-regexMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed Hat High Fix reported
Authorization bypass in github.com/dgrijalva/jwt-goCVE-2020-26160 · GHSA-W73W-5M7G-F7QCVersion ranges need review. github.com/dgrijalva/jwt-go/v4github.com/dgrijalva/jwt-go GoRed Hat High Fix reported
datatables.net vulnerable to Prototype Pollution due to incomplete fixCVE-2020-28458 · GHSA-M7J4-FHG6-XF5V datatables.netOpenShift Service Mesh 1/kiali npmRed Hat High Fix reported
Regular Expression Denial of Service in path-parseCVE-2021-23343 · GHSA-HJ48-42VR-X3V9 path-parseOpenShift Service Mesh 1/kiali npmRed Hat Medium Fix reported
OS Command Injection in node-notifierCVE-2020-7789 · GHSA-5FW9-FQ32-WV5P node-notifierOpenShift Service Mesh 1/kiali npmRed Hat Medium Fix reported
Prototype Pollution in y18nCVE-2020-7774 · GHSA-C4W7-XM78-47VH y18nOpenShift Service Mesh 1/kiali npmRed Hat High Fix reported
Cross-site scripting in bootstrap-selectCVE-2019-20921 · GHSA-7C82-MP33-R854 bootstrap-selectbootstrap-select npmNuGetRed Hat Medium Fix reported
Prototype Pollution in AjvCVE-2020-15366 · GHSA-V88G-CGMW-V5XW ajvOpenShift Service Mesh 1/kiali npmRed Hat Medium Fix reported
Data race and crash in net/httpCVE-2020-15586 · GO-2021-0224 stdlibOpenShift Service Mesh 1/jaeger-operator GoRed Hat Medium Fix reported
Panic during division of very large numbers in math/bigCVE-2020-28362 · GO-2021-0069 stdlibOpenShift Serverless/knative-serving GoRed Hat Medium Fix reported
Incorrect operations on the P-224 curve in crypto/ellipticCVE-2021-3114 · GO-2021-0235 stdlibOpenShift Serverless/knative-eventing GoRed Hat Medium Fix reported
golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputsCVE-2020-16845 OpenShift Service Mesh 1/jaeger-operatorOpenShift Service Mesh 1/jaeger Red Hat Medium No fix reported