Security
فارسی
All products

Red Hat Enterprise Linux 10/ipa

Red Hat · Package
14 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
lodash vulnerable to prototype pollution via array-path bypass in `_.unset`, `_.omit`, and `_.pullAtCVE-2026-2950 · GHSA-F23M-R3PF-42RH lodash-amdlodash-es npmRed Hat Medium Fix reported
React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)CVE-2026-53669 · GHSA-WRJC-X8RR-H8H6 react-routerCryostat 4/cryostat-openshift-console-plugin-npm npmRed Hat Medium Fix reported
React Router: Unauthenticated Denial of Service via Inefficient Route MatchingCVE-2026-55685 · GHSA-CHX6-HX7R-MCP5 react-routerExploit Intelligence/exploit-intelligence-tech-preview/agent-client-rhel9 npmRed Hat High Fix reported
React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretationCVE-2026-40181 · GHSA-2J2X-HQR9-3H42 @remix-run/routerreact-router npmRed Hat Medium Fix reported
React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR HydrationCVE-2026-53666 · GHSA-337J-9HXR-RHXG react-routerCryostat 4/cryostat-openshift-console-plugin-npm npmRed Hat Medium Fix reported
React Router vulnerable to DoS via unbounded path expansion in __manifest endpointCVE-2026-42342 · GHSA-8X6R-G9MW-2R78 @remix-run/server-runtimereact-router npmRed Hat High Fix reported
React Router's vendored turbo-stream v2 allows arbitrary constructor invocation via TYPE_ERROR deserialization leading to Unauth RCECVE-2026-42211 · GHSA-49RJ-9FVP-4H2H react-routerOpenShift Pipelines/openshift-pipelines/pipelines-console-plugin-rhel9 npmRed Hat High Fix reported
React Router has stored XSS via unescaped Location header in prerendered redirect HTMLCVE-2026-33244 · GHSA-F22V-GFQF-P8F3 react-routerCryostat 4/cryostat-openshift-console-plugin-npm npmRed Hat Medium Fix reported
React Router has unexpected external redirect via untrusted pathsCVE-2025-68470 · GHSA-9JCX-V3WJ-WH4M react-routerCryostat 4/io.cryostat-cryostat npmRed Hat Medium Fix reported
freeipa: ipa: idm: freeipa: off-by-one buffer overflows in ipa-otpd oauth2.c during OAuth2 device authorizationCVE-2026-14612 Red Hat Enterprise Linux 10/ipaRed Hat Enterprise Linux 6/ipa Red Hat Low No fix reported
ipa: FreeIPA: Authenticated DoS in `otptoken-add` via unbounded OTP key decoding/re-encodingCVE-2026-73196 Red Hat Enterprise Linux 10/ipaRed Hat Enterprise Linux 6/ipa Red Hat Medium No fix reported
ipa: FreeIPA: NULL Pointer Dereference in `ipa-enrollment` Extended Operation (`JOIN_OID`) via Missing Request ValueCVE-2026-73199 Red Hat Enterprise Linux 10/ipaRed Hat Enterprise Linux 6/ipa Red Hat Medium No fix reported
FreeIPA: idm: IdM/FreeIPA Web UI - Client-side open redirect in reset_password.htmlCVE-2026-53683 Red Hat Enterprise Linux 10/ipaRed Hat Enterprise Linux 6/ipa Red Hat Medium No fix reported
ipa: freeIPA: FreeIPA uses subject CN as proof of certificate ownershipCVE-2026-115221 Red Hat Enterprise Linux 10/ipaRed Hat Enterprise Linux 6/ipa Red Hat Medium No fix reported