TI-2021-19622 CVE-2021-43816 · GHSA-mvff-h3cj-wj9c
Improper Preservation of Permissions in containerd
Priority HIGH 74
containerd is an open source container runtime.
RHSA-2022:0735
Red Hat Advanced Cluster Management 2.4.2 security updates and bug fixes
Released 2022-03-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8 rhacm2/acm-grafana-rhel8, rhacm2/acm-must-gather-rhel8, rhacm2/acm-operator-bundle +47
Fixes 10 records
TI-2021-19664 CVE-2021-43858
User privilege escalation in MinIO
Priority MEDIUM 64
MinIO is a Kubernetes native application for cloud storage.
TI-2021-02827 CVE-2021-3918 · GHSA-896r-f27r-55mw
Prototype Pollution in kriszyp/json-schema
Priority MEDIUM 49
json-schema is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
TI-2021-02738 CVE-2021-3807 · GHSA-93q8-gq69-wqmw
Inefficient Regular Expression Complexity in chalk/ansi-regex
Priority MEDIUM 45
ansi-regex is vulnerable to Inefficient Regular Expression Complexity
TI-2022-08320 CVE-2022-24450 · GHSA-g6w6-r76c-28j7
NATS nats-server before 2.7.2 has Incorrect Access Control.
Priority MEDIUM 41
NATS nats-server before 2.7.2 has Incorrect Access Control.
TI-2021-19455 CVE-2021-43565 · GHSA-gwc9-m7rh-j2ww
The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto…
Priority LOW 35
The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server.
TI-2021-17933 CVE-2021-41091 · GHSA-3fwx-pjgw-3558
Insufficiently restricted permissions on data directory in Docker Engine
Priority LOW 33
Moby is an open-source project created by Docker to enable software containerization.
TI-2022-00171 CVE-2022-0235 · GHSA-r683-j2x4-v87g
Exposure of Sensitive Information to an Unauthorized Actor in node-fetch/node-fetch
Priority LOW 31
node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
TI-2021-05824 CVE-2021-22963 · GHSA-p6vg-p826-qp3v
Open redirect in https://github.com/fastify/fastify-static
Priority LOW 30
A redirect vulnerability in the fastify-static module version < 4.2.4 allows remote attackers to redirect users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//google.com/%2e%2e.T…
TI-2021-17931 CVE-2021-41089 · GHSA-v994-f8vw-g7j4
`docker cp` allows unexpected chmod of host files
Priority LOW 28
Moby is an open-source project created by Docker to enable software containerization.