Red Hat Security Advisory

RHSA-2022:7055

RHOSDT 2.6.0 operator/operand containers Security Update

Released 2022-10-19 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift distributed tracing 2.6 rhosdt/opentelemetry-collector-rhel8, rhosdt/opentelemetry-rhel8-operator

TI-2022-13173 CVE-2022-31129 · GHSA-wc69-rhjr-hc9g

HIGH 72

moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05551 Published 2022-07-06 Partial fix · 2.29.4 CWE-400

TI-2022-08598 CVE-2022-24785 · GHSA-8hfj-j24r-96c4

MEDIUM 54

Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.1384 Published 2022-04-04 Partial fix · 2.29.2 CWE-22

TI-2021-02827 CVE-2021-3918 · GHSA-896r-f27r-55mw

MEDIUM 49

json-schema is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0383 Published 2021-11-13 Partial fix · 0.4.0 CWE-1321

TI-2022-01520 CVE-2022-1650 · GHSA-6h5x-7c5m-7cr7

MEDIUM 44

Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior to v2.0.2.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.01861 Published 2022-05-12 Partial fix · v2.0.2, v1.1.1 +2 CWE-212

TI-2022-00456 CVE-2022-0536 · GHSA-pw2r-vq6v-hr8c

LOW 29

Improper Removal of Sensitive Information Before Storage or Transfer in NPM follow-redirects prior to 1.14.8.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01337 Published 2022-02-09 Partial fix · 1.14.8 CWE-212