Red Hat Security AdvisoryRHSA-2023:5376
Red Hat OpenShift Data Foundation 4.13.3 security and bug fix update
Released 2023-09-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHODF 4.13 for RHEL 9 odf4/cephcsi-rhel9, odf4/mcg-rhel9-operator, odf4/odf-console-rhel9
Fixes 2 records
Priority HIGH 72
All versions of the package word-wrap are vulnerable to Regular Expression Denial of Service (ReDoS) due to the usage of an insecure regular expression within the result variable.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01709 · Published 2023-06-22 · Partial fix · 1.2.4 CWE-1333
Priority MEDIUM 52
Not all valid JavaScript whitespace characters are considered to be whitespace.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0156 · Published 2023-05-11 · Partial fix · 1.19.9, 1.20.4 CWE-77
