Security
English
همهٔ محصولات

Network Observability Operator/network-observability/network-observability-console-plugin-pf5-rhel9

Red Hat · بسته
24 گزارش
اطلاع‌رسانی آسیب‌پذیری
دنبال‌کردن
گزارشمحصولاکوسیستمشدتوضعیت اصلاحآخرین تغییر
i18next-http-backend: Namespace value starting with / forms a protocol-relative URL when loadPath/addPath places {{ns}} right after a / (bypass of the // check added for GHSA-xvq9-wjp8-hwqf)CVE-2026-115730 · GHSA-9JHJ-WVMW-CFX5 i18next-http-backendMigration Toolkit for Applications 8/mta/mta-ui-rhel9 npmRed Hat کم اصلاح گزارش شده
i18next-http-backend: Query-parameter injection through & and = in lng when loadPath/addPath puts {{lng}} in the query stringCVE-2026-118258 · GHSA-3CMX-XJWW-583X i18next-http-backendMigration Toolkit for Applications 8/mta/mta-ui-rhel9 npmRed Hat کم اصلاح گزارش شده
i18next-http-backend incomplete URL validation permits SSRFCVE-2026-105800 · GHSA-XVQ9-WJP8-HWQF i18next-http-backendMigration Toolkit for Applications 8/mta/mta-ui-rhel9 npmRed Hat کم اصلاح گزارش شده
fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decodingCVE-2026-110306 · GHSA-W74X-V6F9-J3XG fast-uriCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat متوسط اصلاح گزارش شده
fast-uri vulnerable to improper path equivalence in relative reference normalizationCVE-2026-110095 · GHSA-XHQ7-XMQJ-769H fast-uriCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat کم اصلاح گزارش شده
fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalizationCVE-2026-110180 · GHSA-WJR9-J795-JXCR fast-uriCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat متوسط اصلاح گزارش شده
fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix referencesCVE-2026-110725 · GHSA-333X-W4R6-6CRP fast-uriCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat کم اصلاح گزارش شده
fast-uri vulnerable to inconsistent host case normalization via percent-encoded octetsCVE-2026-86472 · GHSA-HRR3-GC8F-F4QJ fast-uriCost Management On Premise/costmanagement/costmanagement-ui-rhel10 npmRed Hat متوسط اصلاح گزارش شده
fast-uri vulnerable to host confusion via failed IDN canonicalizationCVE-2026-13676 · GHSA-4C8G-83QW-93J6 fast-uriConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs npmRed Hat زیاد اصلاح گزارش شده
React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)CVE-2026-53669 · GHSA-WRJC-X8RR-H8H6 react-routerCryostat 4/cryostat-openshift-console-plugin-npm npmRed Hat متوسط اصلاح گزارش شده
Axios: Nested axios option objects can consume polluted prototype valuesCVE-2026-67319 · GHSA-7Q8Q-RJ6J-MHJQ axiosGatekeeper 3/gatekeeper/gatekeeper-rhel9 npmRed Hat متوسط اصلاح گزارش شده
React Router: Potential CSRF via PUT/PATCH/DELETE document requestsCVE-2026-53663 · GHSA-84G9-W2XQ-VCV6 @remix-run/server-runtimereact-router npmRed Hat کم اصلاح گزارش شده
axios has DoS & Header Injection via Prototype Pollution Read-Side Gadgets in axios merge functionsCVE-2026-44490 · GHSA-898C-Q2CR-XWHG axiosCryostat 4/axios npmRed Hat متوسط اصلاح گزارش شده
Axios: Fetch adapter `ReadableStream` uploads bypass `maxBodyLength`CVE-2026-67317 · GHSA-JQH4-M9W3-8HP9 axiosMigration Toolkit for Applications 8/mta/mta-ui-rhel9 npmRed Hat متوسط اصلاح گزارش شده
Axios: Prototype pollution gadgets can alter axios request constructionCVE-2026-67316 · GHSA-MMX7-HFXF-JPPX axiosCryostat 4/axios npmRed Hat متوسط اصلاح گزارش شده
Axios: NO_PROXY bypass for 0.0.0.0 local addresses in axiosCVE-2026-67315 · GHSA-F4GW-2P7V-4548 axiosMigration Toolkit for Applications 8/mta/mta-ui-rhel9 npmRed Hat متوسط اصلاح گزارش شده
React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR HydrationCVE-2026-53666 · GHSA-337J-9HXR-RHXG react-routerCryostat 4/cryostat-openshift-console-plugin-npm npmRed Hat متوسط اصلاح گزارش شده
JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliasesCVE-2026-53550 · GHSA-H67P-54HQ-RP68 js-yamlCryostat 4/cryostat-openshift-console-plugin-npm npmRed Hat متوسط اصلاح گزارش شده
form-data: CRLF injection in form-data via unescaped multipart field names and filenamesCVE-2026-12143 · GHSA-HMW2-7CC7-3QXX form-dataNetwork Observability Operator/network-observability/network-observability-console-plugin-pf4-rhel9 npmRed Hat زیاد اصلاح گزارش شده
Axios: Null Byte Injection via Reverse-Encoding in AxiosURLSearchParamsCVE-2026-42040 · GHSA-XHJH-PMCV-23JW axiosCryostat 4/axios npmRed Hat کم اصلاح گزارش شده