| js-yaml has prototype pollution in merge (<<)CVE-2025-64718 · GHSA-MH29-5H37-FV8M |
js-yamlCryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Elliptic Uses a Cryptographic Primitive with a Risky ImplementationCVE-2025-14505 · GHSA-848J-6MX2-7J84 |
ellipticLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-operator-bundle |
npmRed Hat |
کم
|
اصلاح اعلام نشده |
|
| qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustionCVE-2025-15284 · GHSA-6RW7-VPXM-498P |
qsLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-operator-bundle |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| body-parser is vulnerable to denial of service when url encoding is usedCVE-2025-13466 · GHSA-WQCH-XFXH-VRR4 |
body-parserCryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| jose4j is vulnerable to DoS via compressed JWE contentCVE-2024-29371 · GHSA-3677-XXCR-WJQV |
org.bitbucket.b_c:jose4jOpenShift Developer Tools and Services/jenkins-2-plugins |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| node-forge is vulnerable to ASN.1 OID Integer TruncationCVE-2025-66030 · GHSA-65CH-62R8-G69G |
node-forgeCryostat 4/io.cryostat-cryostat |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| node-forge has ASN.1 Unbounded RecursionCVE-2025-66031 · GHSA-554W-WPV2-VW27 |
node-forgeLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-operator-bundle |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator DesynchronizationCVE-2025-12816 · GHSA-5GFM-WPXJ-WJGQ |
node-forgeLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-operator-bundle |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| tar-fs has a symlink validation bypass if destination directory is predictable with a specific tarballCVE-2025-59343 · GHSA-VJ76-C3G6-QR5V |
tar-fsCryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9 |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Bouncy Castle for Java Uncontrolled Resource Consumption VulnerabilityCVE-2025-9092 · GHSA-V6CF-MV9H-C8MC |
org.bouncycastle:bc-fipsCryostat 4/bcpkix-jdk18on |
MavenRed Hat |
کم
|
اصلاح گزارش شده |
|
| russh is missing overflow checks during channel windows adjustCVE-2025-54804 · GHSA-H5RC-J5F5-3GCM |
russhRed Hat OpenShift Dev Spaces/devspaces-tech-preview/idea-rhel9 |
Rust / CargoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Apache Commons Lang is vulnerable to Uncontrolled Recursion when processing long inputsCVE-2025-48924 · GHSA-J288-Q9X7-2F5V |
commons-lang:commons-langorg.apache.commons:commons-lang3 |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Bouncy Castle for Java on All (API modules) allows Excessive AllocationCVE-2025-8885 · GHSA-67MF-3CR5-8W23 |
org.bouncycastle:bc-fipsorg.bouncycastle:bcprov-jdk14 |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameterCVE-2025-54798 · GHSA-52F5-9888-HMC6 |
tmpCryostat 4/io.cryostat-cryostat |
npmRed Hat |
کم
|
اصلاح گزارش شده |
|
| Bouncy Castle for Java bcpkix, bcprov, bcpkix-fips on All (API modules) allows Excessive AllocationCVE-2025-8916 · GHSA-4CX2-FC23-5WG6 |
org.bouncycastle:bcpkix-fipsorg.bouncycastle:bcpkix-jdk15on |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Electron has ASAR Integrity Bypass via resource modificationCVE-2025-55305 · GHSA-VMQV-HX8Q-J7MG |
electronRed Hat OpenShift Dev Spaces/devspaces-tech-preview/idea-rhel9 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| markdown-it: Markdown-it Cross-site scriptingCVE-2025-7969 |
Logging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8OpenShift Serverless/openshift-serverless-1/kn-backstage-plugins-eventmesh-rhel8 |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
| curl: libcurl: Curl out of bounds read for cookie pathCVE-2025-9086 |
Red Hat Enterprise Linux 6/curlRed Hat Enterprise Linux 7/curl |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
| ip: Node ip SSRFCVE-2025-59436 |
Cryostat 4/io.cryostat-cryostatMulticluster Engine for Kubernetes/multicluster-engine/console-mce-rhel9 |
Red Hat |
کم
|
اصلاح اعلام نشده |
|
| python: Quadratic complexity in os.path.expandvars() with user-controlled templateCVE-2025-6075 |
Red Hat Enterprise Linux 10/firefoxRed Hat Enterprise Linux 6/python |
Red Hat |
کم
|
اصلاح اعلام نشده |
|
