TI-2022-13173 CVE-2022-31129 · GHSA-wc69-rhjr-hc9g
Inefficient Regular Expression Complexity in moment
Priority HIGH 72
moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates.
RHSA-2022:7313
Red Hat Advanced Cluster Management 2.6.2 security update and bug fixes
Released 2022-11-02 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 rhacm2/acm-governance-policy-addon-controller-rhel8, rhacm2/acm-grafana-rhel8, rhacm2/acm-must-gather-rhel8 +45
Fixes 5 records
TI-2022-09424 CVE-2022-25858 · GHSA-4wf5-vphf-c2xc
Regular expression denial of service (ReDoS) in terser
Priority LOW 39
The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure usage of regular expressions.
TI-2022-09444 CVE-2022-25887 · GHSA-cgfm-xwp7-2cvr
Regular expression denial of service (ReDoS) in sanitize-html
Priority LOW 36
The package sanitize-html before 2.7.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure global regular expression replacement logic of HTML comment removal.
TI-2022-02066 CVE-2022-2238 · GHSA-gpp7-gqhm-5827
SQL injection in Red Hat Advanced Cluster Management for Kubernetes
Priority LOW 31
A vulnerability was found in the search-api container in Red Hat Advanced Cluster Management for Kubernetes when a query in the search filter gets parsed by the backend.
TI-2022-09452 CVE-2022-25896 · GHSA-v923-w3x8-wh69
Session Fixation
Priority LOW 24
This affects the package passport before 0.6.0.