| lodash vulnerable to prototype pollution via array-path bypass in `_.unset`, `_.omit`, and `_.pullAtCVE-2026-2950 · GHSA-F23M-R3PF-42RH |
lodash-amdlodash-es |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| HTTP/2 transport accepts malformed framing-related headers in net/httpCVE-2026-78660 · GO-2026-6610 |
golang.org/x/netstdlib |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is fullCVE-2026-81872 · GHSA-HJF4-FPHR-2H65بازه‌ها نیاز به بررسی دارند. |
go.opentelemetry.io/otel/sdk/logAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinningCVE-2026-81871 · GHSA-W34Q-CM8F-9C5Xبازه‌ها نیاز به بررسی دارند. |
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpcAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/htmlCVE-2026-25681 · GO-2026-5029 |
golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Invoking duplicate attributes can cause XSS in golang.org/x/net/htmlCVE-2026-27136 · GO-2026-5030 |
golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream DecoderCVE-2026-89090 · GHSA-XMRV-PMRH-HHX2بازه‌ها نیاز به بررسی دارند. |
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstreamgithub.com/aws/aws-sdk-go-v2/service/bedrockagentcore |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded inputCVE-2026-45822 · GHSA-VCC3-GHJQ-M6FR |
decode-uri-componentOpenShift Pipelines/openshift-pipelines/pipelines-console-plugin-pf5-rhel9 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)CVE-2026-53669 · GHSA-WRJC-X8RR-H8H6 |
react-routerCryostat 4/cryostat-openshift-console-plugin-npm |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| opentelemetry-go's baggage parsing no longer caps raw header lengthCVE-2026-41178 · GHSA-5WRP-CWCJ-Q835 |
go.opentelemetry.io/otel/baggagego.opentelemetry.io/otel/propagation |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| brace-expansion: Zero-step sequence causes process hang and memory exhaustionCVE-2026-33750 · GHSA-F886-M6HF-6M8V |
brace-expansionCryostat 4/brace-expansion |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretationCVE-2026-40181 · GHSA-2J2X-HQR9-3H42 |
@remix-run/routerreact-router |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR HydrationCVE-2026-53666 · GHSA-337J-9HXR-RHXG |
react-routerCryostat 4/cryostat-openshift-console-plugin-npm |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| React Router vulnerable to DoS via unbounded path expansion in __manifest endpointCVE-2026-42342 · GHSA-8X6R-G9MW-2R78 |
@remix-run/server-runtimereact-router |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Go Net HTML parser is vulnerable to denial of serviceCVE-2026-25680 · GHSA-5CV4-JP36-H3MWبازه‌ها نیاز به بررسی دارند. |
golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| XPath: Boolean expression infinite loop leads to denial of service via CPU exhaustionCVE-2026-32287 · GHSA-65XW-VW82-R86Xبازه‌ها نیاز به بررسی دارند. |
github.com/antchfx/xpathCompliance Operator/compliance/openshift-compliance-operator-bundle |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| path-to-regexp vulnerable to Regular Expression Denial of Service via multiple wildcardsCVE-2026-4923 · GHSA-27V5-C462-WPQ7 |
path-to-regexpCryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| React Router has stored XSS via unescaped Location header in prerendered redirect HTMLCVE-2026-33244 · GHSA-F22V-GFQF-P8F3 |
react-routerCryostat 4/cryostat-openshift-console-plugin-npm |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| React Router vulnerable to Denial of Service via reflected user input in single-fetchCVE-2026-34077 · GHSA-RXV8-25V2-QMQ8 |
react-routerturbo-stream |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| React Router vulnerable to XSS in unstable RSC redirect handling via javascript: redirect targetsCVE-2026-33245 · GHSA-8646-J5J9-6R62 |
react-routerExploit Intelligence/exploit-intelligence-tech-preview/agent-client-rhel9 |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
