| Lodash has Prototype Pollution Vulnerability in `_.unset`, `_.omit`, and `_.pullAt` functionsCVE-2025-13465 · GHSA-XXJR-MMJV-4GPG |
lodash-amdlodash-es |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Timing sidechannel for P-256 on ppc64le in crypto/internal/nistecCVE-2025-22866 · GO-2025-3447 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Golang FIPS OpenSSL has a Use of Uninitialized Variable vulnerabilityCVE-2024-9355 · GHSA-3H3X-2HWV-HR52بازه‌ها نیاز به بررسی دارند. |
github.com/golang-fips/opensslNBDE Tang Server/tang-operator-bundle-container |
GoRed Hat |
زیاد
|
اصلاح اعلام نشده |
|
| kube-controller-manager is vulnerable to half-blind Server Side Request Forgery through in-tree Portworx StorageClassCVE-2025-13281 · GHSA-R6J8-C6R2-37RRبازه‌ها نیاز به بررسی دارند. |
k8s.io/kubernetesBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-shared-resource-rhel9 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| containerd affected by a local privilege escalation via wide permissions on CRI directoryCVE-2024-25621 · GHSA-PWHC-RPQ9-4C8Wبازه‌ها نیاز به بررسی دارند. |
github.com/containerd/containerd/v2github.com/containerd/containerd |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| js-yaml has prototype pollution in merge (<<)CVE-2025-64718 · GHSA-MH29-5H37-FV8M |
js-yamlCryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| form-data uses unsafe random function in form-data for choosing boundaryCVE-2025-7783 · GHSA-FJXV-7RQG-78G4 |
form-dataMigration Toolkit for Virtualization/mtv-candidate/mtv-console-plugin-rhel9 |
npmRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Formidable relies on hexoid to prevent guessing of filenames for untrusted executable contentCVE-2025-46653 · GHSA-75V8-2H7P-7M2M |
formidableOpenShift Serverless/openshift-serverless-1/kn-backstage-plugins-eventmesh-rhel8 |
npmRed Hat |
کم
|
اصلاح گزارش شده |
|
| axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URLCVE-2025-27152 · GHSA-JR5F-V2JV-69X6 |
axiosCryostat 3/io.cryostat-cryostat3 |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| path-to-regexp contains a ReDoSCVE-2024-52798 · GHSA-RHX6-C78J-4Q9W |
path-to-regexpLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustionCVE-2025-15284 · GHSA-6RW7-VPXM-498P |
qsLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-operator-bundle |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| body-parser is vulnerable to denial of service when url encoding is usedCVE-2025-13466 · GHSA-WQCH-XFXH-VRR4 |
body-parserCryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| golang.org/x/crypto/ssh/agent has a potential denial of serviceCVE-2025-47913 · GHSA-56W8-48FP-6MGV |
golang.org/x/crypto/ssh/agentgolang.org/x/crypto |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds readCVE-2025-47914 · GHSA-F6X5-JH6R-WRFVبازه‌ها نیاز به بررسی دارند. |
golang.org/x/cryptoAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumptionCVE-2025-58181 · GHSA-J5W8-Q4QC-RX2Xبازه‌ها نیاز به بررسی دارند. |
golang.org/x/cryptoBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| node-forge is vulnerable to ASN.1 OID Integer TruncationCVE-2025-66030 · GHSA-65CH-62R8-G69G |
node-forgeCryostat 4/io.cryostat-cryostat |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| node-forge has ASN.1 Unbounded RecursionCVE-2025-66031 · GHSA-554W-WPV2-VW27 |
node-forgeLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-operator-bundle |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator DesynchronizationCVE-2025-12816 · GHSA-5GFM-WPXJ-WJGQ |
node-forgeLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-operator-bundle |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| min-document vulnerable to prototype pollutionCVE-2025-57352 · GHSA-RX8G-88G5-QH64 |
min-documentLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-operator-bundle |
npmRed Hat |
کم
|
اصلاح گزارش شده |
|
| Vite middleware may serve files starting with the same name with the public directoryCVE-2025-58751 · GHSA-G4JQ-H2W9-997C |
viteCryostat 4/io.cryostat-cryostat |
npmRed Hat |
کم
|
اصلاح گزارش شده |
|
