| minimatch has potential denial of service via globparts amplificationCVE-2026-118764 · GHSA-G3HV-75WG-M249 |
minimatchCost Management On Premise/costmanagement/costmanagement-ui-rhel10 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversalCVE-2026-118773 · GHSA-3G3M-2FJR-6PW4 |
globCost Management On Premise/costmanagement/costmanagement-ui-rhel10 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Tokio: Race condition in `tokio::time::Interval`CVE-2026-115567 · GHSA-5WJR-9356-4WC8بازه‌ها نیاز به بررسی دارند. |
tokioAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
Rust / CargoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustionCVE-2026-102278 · GHSA-QHR7-859C-M2P7 |
brace-expansionCost Management On Premise/costmanagement/costmanagement-ui-rhel10 |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of serviceCVE-2026-102277 · GHSA-Q2HR-2G5M-VWHR |
brace-expansionCost Management On Premise/costmanagement/costmanagement-ui-rhel10 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustionCVE-2026-102276 · GHSA-6J4F-FJ2G-MC7P |
brace-expansionCost Management On Premise/costmanagement/costmanagement-ui-rhel10 |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| brace-expansion Regular Expression Denial of Service vulnerabilityCVE-2025-5889 · GHSA-V6H2-P8H4-QCJW |
brace-expansionCryostat 4/io.cryostat-cryostat |
npmRed Hat |
کم
|
اصلاح گزارش شده |
|
| `openssl` `X509VerifyParamRef::set_host` buffer over-readCVE-2023-53159 · GHSA-XCF7-RVMH-G6Q4بازه‌ها نیاز به بررسی دارند. |
opensslLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-operator-bundle |
Rust / CargoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| minimatch ReDoS vulnerabilityCVE-2022-3517 · GHSA-F8Q6-P94X-37V3 |
minimatchMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sourcesCVE-2026-84375 · GHSA-2883-XCG3-V3HH |
js-yamlAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-ui-rhel9 |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| uuid: Missing buffer bounds check in v3/v5/v6 when buf is providedCVE-2026-41907 · GHSA-W5HQ-G745-H8PQ |
uuidConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| crossbeam-channel Vulnerable to Double Free on DropCVE-2025-4574 · GHSA-PG9F-39PC-QF8Gبازه‌ها نیاز به بررسی دارند. |
crossbeam-channelRed Hat Enterprise Linux 10/389-ds-base |
Rust / CargoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)CVE-2024-1062 |
Red Hat Directory Server 12/redhat-ds:12/389-ds-baseRed Hat Enterprise Linux 6/389-ds-base |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
| rust-openssl: rust-openssl Use-After-Free in `Md::fetch` and `Cipher::fetch`CVE-2025-3416 |
Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base |
Red Hat |
کم
|
اصلاح اعلام نشده |
|
| 389-ds-base: 389-ds-base: partial stack address information leak via ber_printf type confusion in SSO token handlerCVE-2026-11785 |
Red Hat Directory Server 12/redhat-ds:12/389-ds-baseRed Hat Directory Server 13/389-ds-base |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
| 389-ds-base: 389-ds-base: heap out-of-bounds read in LDIF parser str2entry_state_information_from_type()CVE-2026-11786 |
Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base |
Red Hat |
کم
|
اصلاح اعلام نشده |
|
| 389-ds-base: 389-ds-base: heap buffer over-read in ldap_utf8prev() via str2simple filter parsingCVE-2026-11787 |
Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
| 389-ds-base: 389-ds-base: Content Sync plugin unbounded queue growth and race conditionsCVE-2026-11611 |
Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
| 389-ds-base: 389-ds-base: SMD5 password storage plugin salt length integer underflow crashCVE-2026-11789 |
Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
| 389-ds-base: 389-ds-base: PBKDF2 password storage plugin unbounded iteration count denial of serviceCVE-2026-11790 |
Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
