Security
English
همهٔ محصولات

Red Hat Enterprise Linux 8/grafana

Red Hat · بسته
231 گزارش
اطلاع‌رسانی آسیب‌پذیری
دنبال‌کردن
گزارشمحصولاکوسیستمشدتوضعیت اصلاحآخرین تغییر
minimatch has potential denial of service via globparts amplificationCVE-2026-118764 · GHSA-G3HV-75WG-M249 minimatchCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat متوسط اصلاح گزارش شده
Lodash has Prototype Pollution Vulnerability in `_.unset`, `_.omit`, and `_.pullAt` functionsCVE-2025-13465 · GHSA-XXJR-MMJV-4GPG lodash-amdlodash-es npmRed Hat متوسط اصلاح گزارش شده
lodash vulnerable to prototype pollution via array-path bypass in `_.unset`, `_.omit`, and `_.pullAtCVE-2026-2950 · GHSA-F23M-R3PF-42RH lodash-amdlodash-es npmRed Hat متوسط اصلاح گزارش شده
follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect TargetsCVE-2026-40895 · GHSA-R4Q5-VMMM-2653 follow-redirectsMigration Toolkit for Applications 8/mta/mta-ui-rhel8 npmRed Hat متوسط اصلاح گزارش شده
go-git missing validation decoding Index v4 files leads to panicCVE-2026-33762 · GHSA-GM2X-2G9H-CCM8بازه‌ها نیاز به بررسی دارند. github.com/go-git/go-git/v4github.com/go-git/go-git/v5 GoRed Hat کم اصلاح گزارش شده
Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-CookieCVE-2026-118777 · GHSA-6WVX-3R32-XMCG node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat متوسط اصلاح گزارش شده
Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA storeCVE-2026-118780 · GHSA-4487-J8R4-4G2F node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat کم اصلاح گزارش شده
Forge: AES-GCM authentication bypass via unvalidated tagLength optionCVE-2026-119186 · GHSA-5CWG-6VW7-RJ6P node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat متوسط اصلاح گزارش شده
Forge: ASN.1 OID first arc truncation in asn1.oidToDerCVE-2026-118775 · GHSA-4642-5MCJ-2RQW node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat کم اصلاح گزارش شده
Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891)CVE-2026-118781 · GHSA-H6CR-WJV9-3CPP node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat کم اصلاح گزارش شده
Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversalCVE-2026-118773 · GHSA-3G3M-2FJR-6PW4 globCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat متوسط اصلاح گزارش شده
Echo: Rejected WebSocket upgrades can bypass Echo route-level access controlsCVE-2026-118264 · GHSA-CXF3-9H37-7RR8 github.com/labstack/echo/v4github.com/labstack/echo/v5 GoRed Hat بحرانی اصلاح گزارش شده
compress zstd: Panic on two-block framesCVE-2026-116591 · GHSA-FPMH-FRQ8-7RJ8 github.com/klauspost/compress/zstdAWS Load Balancer Operator/albo/aws-load-balancer-controller-rhel8 GoRed Hat زیاد اصلاح گزارش شده
Reset context tracking on consecutive template expressions in html/templateCVE-2026-94448 · GO-2026-6599 stdlibOpenShift Developer Tools and Services/helm GoRed Hat متوسط اصلاح گزارش شده
HTTP/2 transport accepts malformed framing-related headers in net/httpCVE-2026-78660 · GO-2026-6610 golang.org/x/netstdlib GoRed Hat متوسط اصلاح گزارش شده
HTTP/1 client connection desynchronization after CONNECT rejection in net/httpCVE-2026-56866 · GO-2026-6605 stdlibOpenShift Developer Tools and Services/helm GoRed Hat متوسط اصلاح گزارش شده
HTTP/2 server crash due to HPACK encoder race in net/httpCVE-2026-97032 · GO-2026-6617 golang.org/x/netstdlib GoRed Hat متوسط اصلاح گزارش شده
Double flow control refund on HTTP/2 server streams in net/httpCVE-2026-78663 · GO-2026-6612 golang.org/x/netstdlib GoRed Hat متوسط اصلاح گزارش شده
HTTP/2 server memory exhaustion due to Trailer headers in net/httpCVE-2026-78659 · GO-2026-6603 golang.org/x/netstdlib GoRed Hat متوسط اصلاح گزارش شده
HTTP/1 server connection desynchronization after 2xx CONNECT response in net/httpCVE-2026-94439 · GO-2026-6613 stdlibOpenShift Developer Tools and Services/helm GoRed Hat متوسط اصلاح گزارش شده