Security
English
همهٔ محصولات

Red Hat 3scale API Management Platform 2/3scale-amp2/toolbox-rhel9

Red Hat · بسته
17 گزارش
اطلاع‌رسانی آسیب‌پذیری
دنبال‌کردن
گزارشمحصولاکوسیستمشدتوضعیت اصلاحآخرین تغییر
Active Support: Possible DoS vulnerability in Active Support safe_constantizeCVE-2026-126080 · GHSA-8474-XRP6-WH69 Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8 Red HatRubyGems زیاد اصلاح گزارش شده
JRuby: NONET is bypassed for external DTDs and entities when the systemId uses a short-form IPv4 hostCVE-2026-126062 · GHSA-V995-44V6-5FQM Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8 Red HatRubyGems کم اصلاح گزارش شده
Nokogiri: Use-After-Free in Nokogiri when replacing an attribute valueCVE-2026-126064 · GHSA-3W22-6JFG-527W Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8 Red HatRubyGems کم اصلاح گزارش شده
Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=`CVE-2026-57435 · GHSA-PHWJ-RPRQ-35PP Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7 Red HatRubyGems کم اصلاح گزارش شده
Nokogiri: Possible Use-After-Free in XInclude ProcessingCVE-2026-57438 · GHSA-WFPW-MMFH-QQ69 Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7 Red HatRubyGems کم اصلاح گزارش شده
Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetimeCVE-2026-57437 · GHSA-P67V-3W7G-WJG7 Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7 Red HatRubyGems کم اصلاح گزارش شده
Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]`CVE-2026-57235 · GHSA-5PRR-V3J2-97MH Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7 Red HatRubyGems متوسط اصلاح گزارش شده
Addressable has a Regular Expression Denial of Service in Addressable templatesCVE-2026-35611 · GHSA-H27X-RFFW-24P4 Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8 Red HatRubyGems زیاد اصلاح گزارش شده
Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node typeCVE-2026-57436 · GHSA-WJV4-X9W8-WM3H Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7 Red HatRubyGems کم اصلاح گزارش شده
Concurrent Ruby: `ReentrantReadWriteLock` read-count overflow grants a write lock without exclusivityCVE-2026-54905 · GHSA-WV3X-4VXV-WHPP Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7 Red HatRubyGems کم اصلاح گزارش شده
Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classesCVE-2026-57434 · GHSA-9CV2-CFXC-V4V2 Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7 Red HatRubyGems کم اصلاح گزارش شده
Nokogiri XSLT transform has a memory leakCVE-2026-79771 · GHSA-V2FC-QM4H-8HQV Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8 Red HatRubyGems متوسط اصلاح گزارش شده
Nokogiri does not check the return value from xmlC14NExecuteCVE-2026-79772 · GHSA-WX95-C6CV-8532 Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8 Red HatRubyGems متوسط اصلاح گزارش شده
REXML has DoS condition when parsing malformed XML fileCVE-2025-58767 · GHSA-C2F4-JGMC-Q2R5 Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-operator-bundleLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel9-operator Red HatRubyGems کم اصلاح گزارش شده
nokogiri: libxml2: Nokogiri: Heap buffer under-read in XML Schema validationCVE-2025-71346 Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8 Red Hat کم اصلاح اعلام نشده
nokogiri: Nokogiri: Process crash due to invalid memory read via programming error in internal methodCVE-2026-79769 Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8 Red Hat متوسط اصلاح اعلام نشده
resolv: Resolv gem: DNS allowlist and egress bypass, and cache poisoning via crafted hostnamesCVE-2026-80213 Lightspeed Core/lightspeed-core/rag-tool-cpu-rhel9Lightspeed Core/lightspeed-core/rag-tool-cuda-12.9-rhel9 Red Hat متوسط اصلاح اعلام نشده