Red Hat Security Advisory

RHSA-2023:5379

Network Observability 1.4.0 for OpenShift

Released 2023-09-28 · Red Hat rating Important · View on Red Hat →

Fixed in

NETOBSERV 1.4 for RHEL 9 network-observability/network-observability-console-plugin-rhel9, network-observability/network-observability-ebpf-agent-rhel9, network-observability/network-observability-flowlogs-pipeline-rhel9 +2

Fixes 2 records

TI-2023-11340 CVE-2023-26115 · GHSA-j8xg-fqg3-53r7

Regular expression denial of service in word-wrap

HIGH 72

All versions of the package word-wrap are vulnerable to Regular Expression Denial of Service (ReDoS) due to the usage of an insecure regular expression within the result variable.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01709 Published 2023-06-22 Partial fix · 1.2.4 CWE-1333

TI-2022-09442 CVE-2022-25883 · GHSA-c2qf-rxjj-qqgw

Regular expression denial of service in semver

HIGH 72

Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02761 Published 2023-06-21 Partial fix · 7.5.2, 6.3.1 +1 CWE-1333