Red Hat Security Advisory

RHSA-2021:1186

RHV Manager (ovirt-engine) 4.4.z [ovirt-4.4.5] 0-day security, bug fix, enhance

Released 2021-04-14 · Red Hat rating Moderate · View on Red Hat →

Fixed in

RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4 ovirt-engine-ui-extensions-1.2.5-1.el8ev

Fixes 2 records

TI-2020-17273 CVE-2020-28458 · GHSA-m7j4-fhg6-xf5v

Prototype pollution in datatables.net

LOW 38

All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.03715 Published 2020-12-16 Partial fix · 1.10.22 CWE-1321

TI-2019-15135 CVE-2019-20921 · GHSA-7c82-mp33-r854

bootstrap-select before 1.13.6 allows Cross-Site Scripting (XSS).

LOW 31

bootstrap-select before 1.13.6 allows Cross-Site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01738 Published 2020-09-30 Partial fix · 1.13.6 CWE-79