| minimatch has potential denial of service via globparts amplificationCVE-2026-118764 · GHSA-G3HV-75WG-M249 |
minimatchCost Management On Premise/costmanagement/costmanagement-ui-rhel10 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustionCVE-2026-102278 · GHSA-QHR7-859C-M2P7 |
brace-expansionCost Management On Premise/costmanagement/costmanagement-ui-rhel10 |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of serviceCVE-2026-102277 · GHSA-Q2HR-2G5M-VWHR |
brace-expansionCost Management On Premise/costmanagement/costmanagement-ui-rhel10 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustionCVE-2026-102276 · GHSA-6J4F-FJ2G-MC7P |
brace-expansionCost Management On Premise/costmanagement/costmanagement-ui-rhel10 |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| morgan vulnerable to Log Injection via unescaped double quote in quoted log fieldsCVE-2026-87859 · GHSA-9F6G-J8CH-79G4 |
morganCryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| qs: Denial of Service via Attacker Controlled isBufferCVE-2026-82417 · GHSA-4MJR-XMP4-GH2G |
qsAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-ui-rhel9 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigationCVE-2026-69152 · GHSA-RGW5-RVV9-X895 |
brace-expansionCryostat 4/grafana-infinity-datasource-npm |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groupsCVE-2026-13149 · GHSA-3JXR-9VMJ-R5CP |
brace-expansionConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| morgan vulnerable to Log Forging via unneutralized control characters in :remote-userCVE-2026-5078 · GHSA-4VJ7-5MJ6-JM8M |
morganConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| qs array-limit bypass via bracket-key comma parsingCVE-2026-82562 · GHSA-X5FP-WJ9C-MXMX |
qsAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-ui-rhel9 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliasesCVE-2026-53550 · GHSA-H67P-54HQ-RP68 |
js-yamlCryostat 4/cryostat-openshift-console-plugin-npm |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crashCVE-2026-14257 · GHSA-MH99-V99M-4GVG |
brace-expansionExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| js-yaml: YAML merge-key chains can force quadratic CPU consumptionCVE-2026-59869 · GHSA-52CP-R559-CP3M |
js-yamlCryostat 4/grafana-infinity-datasource-npm |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| morgan vulnerable to Log Forging via unescaped Unicode line separatorsCVE-2026-15603 · GHSA-JXFW-X594-9X9M |
morganCryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sourcesCVE-2026-84375 · GHSA-2883-XCG3-V3HH |
js-yamlAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-ui-rhel9 |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| nodejs: nodejs: Denial of Service via HTTP/2 Alt-Svc heap buffer overflowCVE-2026-123828 |
Red Hat Hardened Images/nodejs20Red Hat Hardened Images/nodejs22 |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
| nodejs: Node.js: Information disclosure via improper permission checks in recursive file watchingCVE-2026-123829 |
Red Hat Hardened Images/nodejs20Red Hat Hardened Images/nodejs22 |
Red Hat |
کم
|
اصلاح اعلام نشده |
|
| nodejs: Node.js: Denial of service via abrupt disconnection during zlib compressionCVE-2026-123862 |
Red Hat Hardened Images/nodejs20Red Hat Hardened Images/nodejs22 |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
| nodejs: Node.js: Denial of Service via improper HTTP/2 session teardownCVE-2026-123863 |
Red Hat Hardened Images/nodejs20Red Hat Hardened Images/nodejs22 |
Red Hat |
زیاد
|
اصلاح اعلام نشده |
|
| nodejs: nodejs: Information disclosure via HTTPS parser re-entrancyCVE-2026-123864 |
Red Hat Hardened Images/nodejs20Red Hat Hardened Images/nodejs22 |
Red Hat |
زیاد
|
اصلاح اعلام نشده |
|
