Red Hat Security Advisory

RHSA-2023:3998

Logging Subsystem 5.7.3 - Red Hat OpenShift security update

Released 2023-07-12 · Red Hat rating Moderate · View on Red Hat →

Fixed in

RHOL 5.7 for RHEL 8 openshift-logging/logging-view-plugin-rhel8

Fixes 2 records

TI-2023-11360 CVE-2023-26136 · GHSA-72xf-g2v4-qvf3

Prototype pollution in tough-cookie

HIGH 81

Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02627 Published 2023-07-01 Partial fix · 4.1.3 CWE-1321

TI-2023-11340 CVE-2023-26115 · GHSA-j8xg-fqg3-53r7

Regular expression denial of service in word-wrap

HIGH 72

All versions of the package word-wrap are vulnerable to Regular Expression Denial of Service (ReDoS) due to the usage of an insecure regular expression within the result variable.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01709 Published 2023-06-22 Partial fix · 1.2.4 CWE-1333