| Lodash has Prototype Pollution Vulnerability in `_.unset`, `_.omit`, and `_.pullAt` functionsCVE-2025-13465 · GHSA-XXJR-MMJV-4GPG |
lodash-amdlodash-es |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressionsCVE-2026-27904 · GHSA-23C5-XMQV-RM74 |
minimatchLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-operator-bundle |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Next.js self-hosted applications vulnerable to DoS via Image Optimizer remotePatterns configurationCVE-2025-59471 · GHSA-9G9P-9GW9-JX7F |
nextRed Hat Enterprise Linux 10/firefox |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| js-yaml has prototype pollution in merge (<<)CVE-2025-64718 · GHSA-MH29-5H37-FV8M |
js-yamlCryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| DOMPurify contains a Cross-site Scripting vulnerabilityCVE-2026-0540 · GHSA-V2WJ-7WPQ-C8VV |
dompurifyCryostat 4/io.cryostat-cryostat |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| DOMPurify contains a Cross-site Scripting vulnerabilityCVE-2025-15599 · GHSA-V8JM-5VWX-CFXM |
dompurifyCryostat 4/io.cryostat-cryostat |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Next.js: HTTP request smuggling in rewritesCVE-2026-29057 · GHSA-GGV3-7P47-PFV8 |
nextRed Hat Enterprise Linux 9/dotnet7.0 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| flatted vulnerable to unbounded recursion DoS in parse() revive phaseCVE-2026-32141 · GHSA-25H7-PFQ9-P65F |
flattedLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-operator-bundle |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| qs's arrayLimit bypass in comma parsing allows denial of serviceCVE-2026-2391 · GHSA-W7FW-MJWX-W883 |
qsCryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9 |
npmRed Hat |
کم
|
اصلاح گزارش شده |
|
| Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfigCVE-2026-25639 · GHSA-43FC-JF86-J433 |
axiosLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-operator-bundle |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segmentsCVE-2026-27903 · GHSA-7R86-CG39-JMMJ |
minimatchCryostat 4/io.cryostat-cryostat |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behaviorCVE-2025-68458 · GHSA-8FGC-7CC6-RX7X |
webpackCryostat 4/io.cryostat-cryostat |
npmRed Hat |
کم
|
اصلاح گزارش شده |
|
| @isaacs/brace-expansion has Uncontrolled Resource ConsumptionCVE-2026-25547 · GHSA-7H2J-956F-4VF2 |
@isaacs/brace-expansionCryostat 4/io.cryostat-cryostat |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| ajv has ReDoS when using `$data` optionCVE-2025-69873 · GHSA-2G4F-4PWH-QVX6 |
ajvConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| minimatch has a ReDoS via repeated wildcards with non-matching literal in patternCVE-2026-26996 · GHSA-3PPC-4F35-3M26 |
minimatchLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| bn.js affected by an infinite loopCVE-2026-2739 · GHSA-378V-28HJ-76WF |
bn.jsLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-operator-bundle |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects → SSRF + cache persistenceCVE-2025-68157 · GHSA-38R7-794H-5758 |
webpackCryostat 4/io.cryostat-cryostat |
npmRed Hat |
کم
|
اصلاح گزارش شده |
|
| Next.js has Unbounded Memory Consumption via PPR Resume Endpoint CVE-2025-59472 · GHSA-5F7Q-JPQC-WP7H |
nextRed Hat Enterprise Linux 10/firefox |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Elliptic Uses a Cryptographic Primitive with a Risky ImplementationCVE-2025-14505 · GHSA-848J-6MX2-7J84 |
ellipticLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-operator-bundle |
npmRed Hat |
کم
|
اصلاح اعلام نشده |
|
| Preact has JSON VNode Injection issueCVE-2026-22028 · GHSA-36HM-QXXP-PG3M |
preactLogging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel9 |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
