Red Hat Security Advisory

RHSA-2023:0634

Red Hat OpenShift (Logging Subsystem) security update

Released 2023-02-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

RHOL 5.6 for RHEL 8 openshift-logging/logging-view-plugin-rhel8

Fixes 2 records

TI-2021-14025 CVE-2021-35065 · GHSA-cj88-88mr-972w

The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial…

HIGH 66

The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial of service) attacks against the enclosure regular expression.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01696 Published 2022-12-26 Partial fix · 6.0.1 CWE-1333

TI-2022-22819 CVE-2022-46175 · GHSA-9c47-m6qq-7p4h

Prototype pollution in json5

MEDIUM 50

JSON5 is an extension to the popular JSON file format that aims to be easier to write and maintain by hand (e.g.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.09698 Published 2022-12-24 Partial fix · 2.2.2, 1.0.2 CWE-1321