TI-2022-13173 CVE-2022-31129 · GHSA-wc69-rhjr-hc9g
Inefficient Regular Expression Complexity in moment
Priority HIGH 72
moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates.
RHSA-2023:1486
Red Hat Gluster Storage web-admin-build security update
Released 2023-03-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Gluster 3.5 Web Administration on RHEL-7 grafana-5.2.4-6.el7rhgs, rubygem-puma-4.3.12-1.el7rhgs, rubygem-puma-doc-4.3.12-1.el7rhgs +4
Fixes 5 records
TI-2022-13206 CVE-2022-31163 · GHSA-5cm2-9h8c-rvfx
TZInfo relative path traversal vulnerability allows loading of arbitrary files
Priority HIGH 70
TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules.
TI-2022-08603 CVE-2022-24790 · GHSA-h99w-9q5r-gjq9
HTTP Request Smuggling in puma
Priority MEDIUM 52
Puma is a simple, fast, multi-threaded, parallel HTTP 1.1 server for Ruby/Rack applications.
TI-2022-12397 CVE-2022-30123 · GHSA-wq4h-7r42-5hrr
A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which…
Priority MEDIUM 47
A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack.
TI-2022-12396 CVE-2022-30122 · GHSA-hxqx-xwvh-44m2
Uncontrolled resource consumption in https://github.com/rack/rack
Priority MEDIUM 43
A possible denial of service vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 in the multipart parsing component of Rack.