Security
English
همهٔ محصولات

Red Hat Enterprise Linux 9/grafana

Red Hat · بسته
217 گزارش
اطلاع‌رسانی آسیب‌پذیری
دنبال‌کردن
گزارشمحصولاکوسیستمشدتوضعیت اصلاحآخرین تغییر
Forge: X.509 pathLenConstraint not enforced by verifyCertificateChain() for CA certificates without keyUsageCVE-2026-119189 · GHSA-H46V-RMH6-FQ4F node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat متوسط اصلاح گزارش شده
Forge: Certificate signature verified with the issuer's RSA signature schemeCVE-2026-118774 · GHSA-9WG5-MJ3P-V49Q node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat کم اصلاح گزارش شده
Forge: Incomplete PKCS#7 padding validation in AES/DES CBC and ECB decryptionCVE-2026-118776 · GHSA-2VGQ-WCHC-25W7 node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat کم اصلاح گزارش شده
Echo: Rejected WebSocket upgrades can bypass Echo route-level access controlsCVE-2026-118264 · GHSA-CXF3-9H37-7RR8بازه‌ها نیاز به بررسی دارند. github.com/labstack/echo/v4github.com/labstack/echo/v5 GoRed Hat بحرانی اصلاح گزارش شده
minimatch has potential denial of service via globparts amplificationCVE-2026-118764 · GHSA-G3HV-75WG-M249 minimatchCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat متوسط اصلاح گزارش شده
Lodash has Prototype Pollution Vulnerability in `_.unset`, `_.omit`, and `_.pullAt` functionsCVE-2025-13465 · GHSA-XXJR-MMJV-4GPG lodash-amdlodash-es npmRed Hat متوسط اصلاح گزارش شده
lodash vulnerable to prototype pollution via array-path bypass in `_.unset`, `_.omit`, and `_.pullAtCVE-2026-2950 · GHSA-F23M-R3PF-42RH lodash-amdlodash-es npmRed Hat متوسط اصلاح گزارش شده
go-git missing validation decoding Index v4 files leads to panicCVE-2026-33762 · GHSA-GM2X-2G9H-CCM8بازه‌ها نیاز به بررسی دارند. github.com/go-git/go-git/v4github.com/go-git/go-git/v5 GoRed Hat کم اصلاح گزارش شده
Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-CookieCVE-2026-118777 · GHSA-6WVX-3R32-XMCG node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat متوسط اصلاح گزارش شده
Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA storeCVE-2026-118780 · GHSA-4487-J8R4-4G2F node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat کم اصلاح گزارش شده
Forge: AES-GCM authentication bypass via unvalidated tagLength optionCVE-2026-119186 · GHSA-5CWG-6VW7-RJ6P node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat متوسط اصلاح گزارش شده
Forge: ASN.1 OID first arc truncation in asn1.oidToDerCVE-2026-118775 · GHSA-4642-5MCJ-2RQW node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat کم اصلاح گزارش شده
Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891)CVE-2026-118781 · GHSA-H6CR-WJV9-3CPP node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat کم اصلاح گزارش شده
Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversalCVE-2026-118773 · GHSA-3G3M-2FJR-6PW4 globCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat متوسط اصلاح گزارش شده
HTTP/2 transport accepts malformed framing-related headers in net/httpCVE-2026-78660 · GO-2026-6610 golang.org/x/netstdlib GoRed Hat متوسط اصلاح گزارش شده
HTTP/2 server crash due to HPACK encoder race in net/httpCVE-2026-97032 · GO-2026-6617 golang.org/x/netstdlib GoRed Hat متوسط اصلاح گزارش شده
Double flow control refund on HTTP/2 server streams in net/httpCVE-2026-78663 · GO-2026-6612 golang.org/x/netstdlib GoRed Hat متوسط اصلاح گزارش شده
HTTP/2 server memory exhaustion due to Trailer headers in net/httpCVE-2026-78659 · GO-2026-6603 golang.org/x/netstdlib GoRed Hat متوسط اصلاح گزارش شده
Recognize yield as regexp preceder keyword in html/templateCVE-2026-97030 · GO-2026-6600 stdlibOpenShift Developer Tools and Services/helm GoRed Hat متوسط اصلاح گزارش شده
Sensitive headers not cleared on cross-origin redirect in net/httpCVE-2025-4673 · GO-2025-3751 stdlibCryostat 4/cryostat/cryostat-storage-rhel9 GoRed Hat متوسط اصلاح گزارش شده