Security
English
همهٔ محصولات

Red Hat Enterprise Linux 8/ubi8/nodejs-22-minimal

Red Hat · بسته
7 گزارش
اطلاع‌رسانی آسیب‌پذیری
دنبال‌کردن
گزارشمحصولاکوسیستمشدتوضعیت اصلاحآخرین تغییر
ip-address: Address6 builds a parse diagnostic proportional to the input with no length bound, allowing a single long string to stall or crash the processCVE-2026-101911 · GHSA-H3MG-XC3C-68PW ip-addressCryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9 npmRed Hat متوسط اصلاح گزارش شده
brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of serviceCVE-2026-102277 · GHSA-Q2HR-2G5M-VWHR brace-expansionCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat متوسط اصلاح گزارش شده
node-tar: Process crash via PAX numeric path type confusionCVE-2026-59871 · GHSA-W8WR-V893-VJVP tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs npmRed Hat متوسط اصلاح گزارش شده
node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)CVE-2026-53655 · GHSA-VMF3-W455-68VH tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs npmRed Hat متوسط اصلاح گزارش شده
ip-address: a CIDR suffix on the parsed address suppresses special-use classification and can bypass SSRF and trust-boundary checksCVE-2026-69198 · GHSA-4XRF-JV44-H6HH ip-addressCryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9 npmRed Hat متوسط اصلاح گزارش شده
node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath recordsCVE-2026-59875 · GHSA-GVWX-54WH-QM9J tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs npmRed Hat متوسط اصلاح گزارش شده
sigstore's `certificateOIDs` verification constraints are silently dropped and never enforcedCVE-2026-48815 · GHSA-52V5-JR5W-GJXR sigstoreExploit Intelligence/sigstore npmRed Hat زیاد اصلاح گزارش شده