Security
English
همهٔ محصولات

Red Hat JBoss Enterprise Application Platform 8/jboss-eap.1-runtime-maven-repository.zip

Red Hat · بسته
17 گزارش
اطلاع‌رسانی آسیب‌پذیری
دنبال‌کردن
گزارشمحصولاکوسیستمشدتوضعیت اصلاحآخرین تغییر
Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversalCVE-2026-118773 · GHSA-3G3M-2FJR-6PW4 globCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat متوسط اصلاح گزارش شده
Vitest: Servers misapply `server.fs.deny`, serving `.env`, private keys, `.git`, and the API token fileCVE-2026-112948 · GHSA-P458-7748-MCP3 @vitest/browser@vitest/ui npmRed Hat متوسط اصلاح گزارش شده
Vitest: Code injection via unauthenticated manual mock registrationCVE-2026-112949 · GHSA-QXG6-89MG-RQV8 @vitest/mockerRed Hat AMQ Broker 7/amq-broker-bin.zip npmRed Hat متوسط اصلاح گزارش شده
Vite: Cross origin script execution through Vite custom middlewareCVE-2026-112945 · GHSA-9JRQ-W75R-8GCW vite-plusvite npmRed Hat کم اصلاح گزارش شده
Vite: First 4 bytes of files outside of `server.fs` setting is exposed by `?vite-wasm-instance`CVE-2026-112947 · GHSA-VFPM-58RQ-9QCG vite-plusvite npmRed Hat متوسط اصلاح گزارش شده
Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machineCVE-2026-112946 · GHSA-RQ7H-C2JC-7F22 vite-plusvite npmRed Hat متوسط اصلاح گزارش شده
jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)CVE-2026-68494 · GHSA-R7WM-3CXJ-WFF9 com.fasterxml.jackson.core:jackson-coretools.jackson.core:jackson-core MavenRed Hat زیاد اصلاح گزارش شده
moment vulnerable to Path Traversal via crafted non-string locale nameCVE-2026-17495 · GHSA-4P3W-J4W9-5JQW momentMulticluster Engine for Kubernetes/multicluster-engine/console-mce-rhel9 npmRed Hat متوسط اصلاح گزارش شده
brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of serviceCVE-2026-102277 · GHSA-Q2HR-2G5M-VWHR brace-expansionCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat متوسط اصلاح گزارش شده
Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats)CVE-2026-73088 · GHSA-73WF-GQ98-2V4G browserslistNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat زیاد اصلاح گزارش شده
brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigationCVE-2026-69152 · GHSA-RGW5-RVV9-X895 brace-expansionCryostat 4/grafana-infinity-datasource-npm npmRed Hat زیاد اصلاح گزارش شده
jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS ConditionCVE-2026-18401 · GHSA-72HV-8253-57QQ com.fasterxml.jackson.core:jackson-coretools.jackson.core:jackson-core MavenRed Hat متوسط اصلاح گزارش شده
js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sourcesCVE-2026-84375 · GHSA-2883-XCG3-V3HH js-yamlAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-ui-rhel9 npmRed Hat زیاد اصلاح گزارش شده
Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect MockCVE-2026-84373 · GHSA-82FW-GWWQ-J7X9 @vitest/mockervitest npmRed Hat متوسط اصلاح گزارش شده
flat: flat: Denial of Service via unbounded numeric array keysCVE-2026-119051 Cryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9OpenShift Lightspeed/openshift-lightspeed/lightspeed-agentic-console-rhel9 Red Hat متوسط اصلاح اعلام نشده
i18next: i18next: Denial of Service via unsafe recursive object mergingCVE-2026-63402 Cryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9Migration Toolkit for Applications 8/mta/mta-ui-rhel9 Red Hat متوسط اصلاح اعلام نشده
uri-js: uri-js: Denial of Service via malformed path segmentsCVE-2026-93690 Cost Management On Premise/costmanagement/costmanagement-ui-rhel10Multicluster Engine for Kubernetes/multicluster-engine/console-mce-rhel9 Red Hat زیاد اصلاح اعلام نشده