Security
English
همهٔ محصولات

Red Hat OpenShift AI (RHOAI)/rhoai/odh-mod-arch-automl-rhel9

Red Hat · بسته
113 گزارش
اطلاع‌رسانی آسیب‌پذیری
دنبال‌کردن
گزارشمحصولاکوسیستمشدتوضعیت اصلاحآخرین تغییر
minimatch has potential denial of service via globparts amplificationCVE-2026-118764 · GHSA-G3HV-75WG-M249 minimatchCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat متوسط اصلاح گزارش شده
joi: quadratic-time split in `string().email({ multiple: true })` allows denial of serviceCVE-2026-118772 · GHSA-4528-X5FX-H6HG @hapi/joijoi npmRed Hat زیاد اصلاح گزارش شده
Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversalCVE-2026-118773 · GHSA-3G3M-2FJR-6PW4 globCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat متوسط اصلاح گزارش شده
Distrust compromised intermediate certificates in crypto/x509CVE-2026-111943 · GO-2026-6809 rustls-webpkiwebpki-root-certs Rust / CargoGoRed Hat زیاد اصلاح گزارش شده
systeminformation has path traversal in Linux networkStats() that allows symlink-based file disclosure outside /sys/class/netCVE-2026-116673 · GHSA-4VJG-VX72-QQ4G systeminformationCryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9 npmRed Hat کم اصلاح گزارش شده
systeminformation has prototype pollution in `networkStats()` via the interface nameCVE-2026-116674 · GHSA-7648-JMWF-VW7J systeminformationCryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9 npmRed Hat متوسط اصلاح گزارش شده
Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/netCVE-2026-97045 · GO-2026-6866 golang.org/x/netRed Hat OpenShift AI (RHOAI)/rhoai/odh-ai-gateway-operator-rhel9 GoRed Hat متوسط اصلاح گزارش شده
Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/netCVE-2026-78661 · GO-2026-6860 golang.org/x/netRed Hat OpenShift AI (RHOAI)/rhoai/odh-ai-gateway-operator-rhel9 GoRed Hat زیاد اصلاح گزارش شده
undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG bufferingCVE-2026-109932 · GHSA-9FM3-97PX-RJF6 undiciCryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9 npmRed Hat متوسط اصلاح گزارش شده
undici vulnerable to Denial of Service via unhandled exception in the decompress interceptorCVE-2026-87029 · GHSA-55WC-3PG8-JFW6 undiciCryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9 npmRed Hat متوسط اصلاح گزارش شده
undici vulnerable to Denial of Service via unbounded memory in the EventSource parserCVE-2026-109924 · GHSA-4QV8-2P9J-2685 undiciCryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9 npmRed Hat متوسط اصلاح گزارش شده
undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokensCVE-2026-109841 · GHSA-F72V-6W45-Q472 undiciCryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9 npmRed Hat متوسط اصلاح گزارش شده
fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decodingCVE-2026-110306 · GHSA-W74X-V6F9-J3XG fast-uriCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat متوسط اصلاح گزارش شده
fast-uri vulnerable to improper path equivalence in relative reference normalizationCVE-2026-110095 · GHSA-XHQ7-XMQJ-769H fast-uriCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat کم اصلاح گزارش شده
fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalizationCVE-2026-110180 · GHSA-WJR9-J795-JXCR fast-uriCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat متوسط اصلاح گزارش شده
fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix referencesCVE-2026-110725 · GHSA-333X-W4R6-6CRP fast-uriCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat کم اصلاح گزارش شده
fastify is vulnerable to header validation bypass via case-sensitive propertyNamesCVE-2026-107832 · GHSA-389G-GV7Q-R4X8 fastifyRed Hat Enterprise Linux AI (RHEL AI) 3/rhelai3/bootc-cuda-rhel9 npmRed Hat کم اصلاح گزارش شده
Panic parsing crafted input in x/text/secure/precis in golang.org/x/textCVE-2026-56851 · GO-2026-6629 golang.org/x/textRed Hat Hardened Images/golang1.25 GoRed Hat زیاد اصلاح گزارش شده
HTTP/2 server crash due to HPACK encoder race in net/httpCVE-2026-97032 · GO-2026-6617 golang.org/x/netstdlib GoRed Hat متوسط اصلاح گزارش شده
Double flow control refund on HTTP/2 server streams in net/httpCVE-2026-78663 · GO-2026-6612 golang.org/x/netstdlib GoRed Hat متوسط اصلاح گزارش شده