| protobufjs has an arbitrary code execution issueCVE-2026-41242 · GHSA-XQ3M-2V4X-88GG |
protobufjsOpenShift Pipelines/openshift-pipelines/pipelines-console-plugin-rhel8 |
npmRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| undici WebSocket client vulnerable to denial of service via fragment count bypassCVE-2026-12151 · GHSA-VXPW-J846-P89Q |
undiciOpenShift Pipelines/openshift-pipelines/pipelines-console-plugin-pf5-rhel9 |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| lodash vulnerable to prototype pollution via array-path bypass in `_.unset`, `_.omit`, and `_.pullAtCVE-2026-2950 · GHSA-F23M-R3PF-42RH |
lodash-amdlodash-es |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| lodash vulnerable to Code Injection via `_.template` imports key namesCVE-2026-4800 · GHSA-R5FR-RJXR-66JC |
lodash-amdlodash-es |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| source-map-js allows event-loop denial of service through indexed source-map section offsetsCVE-2026-93749 · GHSA-68FV-2MGG-JV7Q |
source-map-jsNode HealthCheck Operator/redhat-user-workloads/nhc-bundle-0-9 |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| compression vulnerable to Denial of Service via memory leak on premature response closeCVE-2026-87776 · GHSA-VC2V-76PW-4V95 |
compressionNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| webpack-dev-middleware vulnerable to Path Traversal via non-slash-terminated publicPathCVE-2026-76844 · GHSA-G84C-RXFJ-3J2C |
webpack-dev-middlewareNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| fast-uri vulnerable to inconsistent host case normalization via percent-encoded octetsCVE-2026-86472 · GHSA-HRR3-GC8F-F4QJ |
fast-uriCost Management On Premise/costmanagement/costmanagement-ui-rhel10 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| undici vulnerable to Denial of Service via orphaned RetryHandler response bodyCVE-2026-18149 · GHSA-PMJH-FQ2X-6V4X |
undiciOpenShift Pipelines/openshift-pipelines/pipelines-console-plugin-pf5-rhel9 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| undici vulnerable to downstream response splitting via retry interceptorCVE-2026-18540 · GHSA-R53P-7PC4-XJ5R |
undiciExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
npmRed Hat |
کم
|
اصلاح گزارش شده |
|
| undici vulnerable to Denial of Service via unrequested WebSocket subprotocolCVE-2026-19534 · GHSA-RFGV-XXQX-MFG5 |
undiciExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| undici vulnerable to Denial of Service via unbounded decompression of compressed responsesCVE-2026-84890 · GHSA-3XPG-4RPP-HHHM |
undiciExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared cachesCVE-2026-84933 · GHSA-2JFJ-6HJV-FM6J |
undiciOpenShift Pipelines/openshift-pipelines/pipelines-console-plugin-pf5-rhel9 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPoolCVE-2026-84961 · GHSA-W293-VG96-WGC3 |
undiciExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| undici vulnerable to cross-origin cache poisoning via missing origin isolation in interceptorsCVE-2026-85152 · GHSA-VP8M-P9JH-Q5PM |
undiciExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| undici vulnerable to caching and replay of unsafe HTTP method responsesCVE-2026-85008 · GHSA-8436-99HF-9MMV |
undiciExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
npmRed Hat |
کم
|
اصلاح گزارش شده |
|
| undici vulnerable to response truncation via oversized chunked responses in the dump interceptorCVE-2026-84947 · GHSA-2GQQ-GQF2-X968 |
undiciExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
npmRed Hat |
کم
|
اصلاح گزارش شده |
|
| undici vulnerable to Denial of Service via WebSocketStream unclean closeCVE-2026-85014 · GHSA-RX4F-C7P8-82VQ |
undiciExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompressionCVE-2026-85024 · GHSA-3WWX-PV8P-Q78V |
undiciExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| fast-uri vulnerable to authority injection via an unvalidated port in serializeCVE-2026-84292 · GHSA-QW65-CVWX-89V3 |
fast-uriMulticluster Engine for Kubernetes/multicluster-engine/console-mce-rhel9 |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
