Read the docs
Red Hat Security Advisory

RHSA-2021:2865

RHV Manager (ovirt-engine) security update [ovirt-4.4.7]

Released 2021-07-22 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 4 records

TI-2021-06054 CVE-2021-23358 · GHSA-cf4h-3jhx-xvhq

Arbitrary code injection in underscore

Priority HIGH 67

The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, particularly when a variable property is passed as an argument…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.042 Published 2021-03-29 Partial fix · 1.13.0-2, 1.12.1 CWE-94
TI-2020-06251 CVE-2020-7733 · GHSA-662x-fhqg-9p8v

Regular expression denial of service (ReDoS) in ua-parser-js

Priority MEDIUM 40

The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex for Redmi Phones and Mi Pad Tablets UA.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04483 Published 2020-09-16 Partial fix · 0.7.22 CWE-400
TI-2021-06041 CVE-2021-23343 · GHSA-hj48-42vr-x3v9

Regular expression denial of service (ReDoS) in path-parse

Priority LOW 37

All versions of package path-parse are vulnerable to Regular Expression Denial of Service (ReDoS) via splitDeviceRe, splitTailRe, and splitPathRe regular expressions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02218 Published 2021-05-04 Partial fix · 1.0.7 CWE-400