Read the docs
Red Hat Security Advisory

RHSA-2021:4626

RHV Manager (ovirt-engine) security update [ovirt-4.4.9]

Released 2021-11-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 2 records

Priority MEDIUM 40

The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex for Redmi Phones and Mi Pad Tablets UA.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04483 Published 2020-09-16 Partial fix · 0.7.22 CWE-400