Security
English
همهٔ محصولات

Red Hat Openshift Data Foundation 4/rhceph-dev/odf4-ocs-client-console-rhel9

Red Hat · بسته
14 گزارش
اطلاع‌رسانی آسیب‌پذیری
دنبال‌کردن
گزارشمحصولاکوسیستمشدتوضعیت اصلاحآخرین تغییر
source-map-js allows event-loop denial of service through indexed source-map section offsetsCVE-2026-93749 · GHSA-68FV-2MGG-JV7Q source-map-jsNode HealthCheck Operator/redhat-user-workloads/nhc-bundle-0-9 npmRed Hat زیاد اصلاح گزارش شده
brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustionCVE-2026-102276 · GHSA-6J4F-FJ2G-MC7P brace-expansionCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat زیاد اصلاح گزارش شده
undici vulnerable to Denial of Service via unrequested WebSocket subprotocolCVE-2026-19534 · GHSA-RFGV-XXQX-MFG5 undiciExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 npmRed Hat زیاد اصلاح گزارش شده
fast-uri vulnerable to authority injection via an unvalidated port in serializeCVE-2026-84292 · GHSA-QW65-CVWX-89V3 fast-uriOpenShift Lightspeed/openshift-lightspeed/lightspeed-agentic-console-rhel9 npmRed Hat زیاد اصلاح گزارش شده
fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative referencesCVE-2026-75931 · GHSA-5JGF-P345-68V8 fast-uriOpenShift Lightspeed/openshift-lightspeed/lightspeed-agentic-console-rhel9 npmRed Hat زیاد اصلاح گزارش شده
DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSSCVE-2026-75838 · GHSA-55Q2-FJHQ-7XH7 dompurifyAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-ui-rhel9 npmRed Hat متوسط اصلاح گزارش شده
brace-expansion: Large numeric range defeats documented `max` DoS protectionCVE-2026-45149 · GHSA-JXXR-4GWJ-5JF2 brace-expansionConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs npmRed Hat متوسط اصلاح گزارش شده
React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretationCVE-2026-40181 · GHSA-2J2X-HQR9-3H42 @remix-run/routerreact-router npmRed Hat متوسط اصلاح گزارش شده
fast-uri vulnerable to server-side request forgery via repeated hostname percent-decodingCVE-2026-75899 · GHSA-FPH4-WMHF-6FWF fast-uriOpenShift Lightspeed/openshift-lightspeed/lightspeed-agentic-console-rhel9 npmRed Hat زیاد اصلاح گزارش شده
React Router has stored XSS via unescaped Location header in prerendered redirect HTMLCVE-2026-33244 · GHSA-F22V-GFQF-P8F3 react-routerCryostat 4/cryostat-openshift-console-plugin-npm npmRed Hat متوسط اصلاح گزارش شده
gettext-converter: Prototype pollution in js2i18next() via crafted translation keysCVE-2026-55451 · GHSA-F4JP-RW7W-CCWG gettext-converterRed Hat Openshift Data Foundation 4/odf4/ocs-client-console-rhel9 npmRed Hat متوسط اصلاح گزارش شده
React Router vulnerable to Denial of Service via reflected user input in single-fetchCVE-2026-34077 · GHSA-RXV8-25V2-QMQ8 react-routerturbo-stream npmRed Hat زیاد اصلاح گزارش شده
React Router vulnerable to XSS in unstable RSC redirect handling via javascript: redirect targetsCVE-2026-33245 · GHSA-8646-J5J9-6R62 react-routerExploit Intelligence/exploit-intelligence-tech-preview/agent-client-rhel9 npmRed Hat زیاد اصلاح گزارش شده
uri-js: uri-js: Denial of Service via malformed path segmentsCVE-2026-93690 Cost Management On Premise/costmanagement/costmanagement-ui-rhel10Multicluster Engine for Kubernetes/multicluster-engine/console-mce-rhel9 Red Hat زیاد اصلاح اعلام نشده