Red Hat Security Advisory

RHSA-2022:6507

Red Hat Advanced Cluster Management 2.5.2 security fixes and bug fixes

Released 2022-09-13 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 rhacm2/acm-cluster-proxy-rhel8, rhacm2/acm-governance-policy-addon-controller-rhel8, rhacm2/acm-grafana-rhel8 +47

TI-2022-16490 CVE-2022-36067 · GHSA-mrgp-mrhc-5jrq

HIGH 82

vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.47868 Published 2022-09-06 Partial fix · 3.9.11 CWE-913

TI-2022-13173 CVE-2022-31129 · GHSA-wc69-rhjr-hc9g

HIGH 72

moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05551 Published 2022-07-06 Partial fix · 2.29.4 CWE-400