| minimatch has potential denial of service via globparts amplificationCVE-2026-118764 · GHSA-G3HV-75WG-M249 |
minimatchCost Management On Premise/costmanagement/costmanagement-ui-rhel10 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversalCVE-2026-118773 · GHSA-3G3M-2FJR-6PW4 |
globCost Management On Premise/costmanagement/costmanagement-ui-rhel10 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Tokio: Race condition in `tokio::time::Interval`CVE-2026-115567 · GHSA-5WJR-9356-4WC8بازه‌ها نیاز به بررسی دارند. |
tokioAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
Rust / CargoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Bootstrap Vulnerable to Cross-Site Scripting in its Popover and Tooltip ComponentsCVE-2025-1647 · GHSA-Q58R-HWC8-RM9J |
bootstrapRed Hat Ceph Storage 4/ceph |
npmRed Hat |
متوسط
|
اصلاح اعلام نشده |
|
| brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustionCVE-2026-102278 · GHSA-QHR7-859C-M2P7 |
brace-expansionCost Management On Premise/costmanagement/costmanagement-ui-rhel10 |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of serviceCVE-2026-102277 · GHSA-Q2HR-2G5M-VWHR |
brace-expansionCost Management On Premise/costmanagement/costmanagement-ui-rhel10 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustionCVE-2026-102276 · GHSA-6J4F-FJ2G-MC7P |
brace-expansionCost Management On Premise/costmanagement/costmanagement-ui-rhel10 |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template CompilationCVE-2026-33939 · GHSA-9CX6-37PM-9JFF |
handlebarsLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-operator-bundle |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and OptionsCVE-2026-33941 · GHSA-XJPJ-3MR7-GCPF |
handlebarsLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-operator-bundle |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partialCVE-2026-33940 · GHSA-XHPV-HC6G-R9C6 |
handlebarsLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-operator-bundle |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-blockCVE-2026-33938 · GHSA-3MFM-83XF-C92R |
handlebarsLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-operator-bundle |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Handlebars.js has JavaScript Injection via AST Type ConfusionCVE-2026-33937 · GHSA-2W6W-674Q-4C4Q |
handlebarsLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-operator-bundle |
npmRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Handlebars.js has Prototype Pollution Leading to XSS through Partial Template InjectionCVE-2026-33916 · GHSA-2QVQ-RJWJ-GVW9 |
handlebarsCryostat 4/handlebars |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Prototype Pollution in JSON5 via Parse MethodCVE-2022-46175 · GHSA-9C47-M6QQ-7P4H |
json5Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 |
npmRed HatWordPress |
زیاد
|
اصلاح گزارش شده |
|
| Got allows a redirect to a UNIX socketCVE-2022-33987 · GHSA-PFRX-2Q88-QQ97 |
got.NET 6.0 on Red Hat Enterprise Linux/rh-dotnet60-dotnet |
npmRed HatWordPress |
متوسط
|
اصلاح گزارش شده |
|
| minimatch ReDoS vulnerabilityCVE-2022-3517 · GHSA-F8Q6-P94X-37V3 |
minimatchMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Prototype pollution in webpack loader-utilsCVE-2022-37601 · GHSA-76P3-8JX3-JPFQ |
loader-utilsMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 |
npmRed HatWordPress |
بحرانی
|
اصلاح گزارش شده |
|
| Path Traversal: 'dir/../../filename' in moment.localeCVE-2022-24785 · GHSA-8HFJ-J24R-96C4 |
momentmoment.js |
npmNuGetRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Inefficient Regular Expression Complexity in markedCVE-2022-21680 · GHSA-RRRM-QJM4-V8HF |
markedOpenShift Service Mesh 2.0/servicemesh-grafana |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Inefficient Regular Expression Complexity in markedCVE-2022-21681 · GHSA-5V2H-R2CX-5XGJ |
markedOpenShift Service Mesh 2.0/servicemesh-grafana |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
