Read the docs
Red Hat Security Advisory

RHSA-2020:2861

Red Hat OpenShift Service Mesh 1.0 servicemesh-grafana security update

Released 2020-07-07 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 7 records

TI-2019-08423 CVE-2019-11253 · GHSA-pmqp-h87c-mr78

Kubernetes API Server JSON/YAML parsing vulnerable to resource exhaustion attack

Priority MEDIUM 54

Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows authorized users to send malicious YAML or JSON payloads, causing the API…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.25939 Published 2019-10-17 Partial fix · 1.13.12, 1.14.8 +2 CWE-20
TI-2020-06180 CVE-2020-7660 · GHSA-hxcc-f52p-wc94

Deserialization of untrusted data in serialize-javascript

Priority MEDIUM 41

serialize-javascript prior to 3.1.0 allows remote attackers to inject arbitrary code via the function "deleteFunctions" within "index.js".

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.03009 Published 2020-06-01 Partial fix · 3.1.0 CWE-502
TI-2020-06182 CVE-2020-7662 · GHSA-g78m-2chm-r7qv

Uncontrolled resource consumption in websocket-extensions

Priority LOW 38

websocket-extensions npm module prior to 0.1.4 allows Denial of Service (DoS) via Regex Backtracking.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03088 Published 2020-06-02 Partial fix · 0.1.4 CWE-400