TI-2021-18023 CVE-2021-41184 · GHSA-gpqq-952q-5327
XSS in the `of` option of the `.position()` util
Priority MEDIUM 57
jQuery-UI is the official jQuery user interface library.
RHSA-2022:4711
RHV Manager (ovirt-engine) [ovirt-4.5.0] security update
Released 2022-05-26 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4 ovirt-engine-4.5.0.7-0.9.el8ev, ovirt-engine-backend-4.5.0.7-0.9.el8ev, ovirt-engine-dbscripts-4.5.0.7-0.9.el8ev +19
Fixes 6 records
TI-2021-18021 CVE-2021-41182 · GHSA-9gj3-hwp5-pmwc
XSS in the `altField` option of the Datepicker widget
Priority MEDIUM 56
jQuery-UI is the official jQuery user interface library.
TI-2021-02738 CVE-2021-3807 · GHSA-93q8-gq69-wqmw
Inefficient Regular Expression Complexity in chalk/ansi-regex
Priority MEDIUM 45
ansi-regex is vulnerable to Inefficient Regular Expression Complexity
TI-2021-18022 CVE-2021-41183 · GHSA-j7qv-pgf6-hvh4
XSS in `*Text` options of the Datepicker widget
Priority MEDIUM 40
jQuery-UI is the official jQuery user interface library.
TI-2021-12904 CVE-2021-33502 · GHSA-px4h-xg32-q955
The normalize-url package before 4.5.1, 5.x before 5.3.1, and 6.x before 6.0.1 for…
Priority LOW 36
The normalize-url package before 4.5.1, 5.x before 5.3.1, and 6.x before 6.0.1 for Node.js has a ReDoS (regular expression denial of service) issue because it has exponential performance for data: URLs.
TI-2021-06117 CVE-2021-23425 · GHSA-38fc-wpqx-33j7
Regular expression denial of service (ReDoS) in trim-off-newlines
Priority LOW 28
All versions of package trim-off-newlines are vulnerable to Regular Expression Denial of Service (ReDoS) via string processing.