Red Hat Security Advisory

RHSA-2023:7222

Migration Toolkit for Containers (MTC) 1.8.2 security and bug fix update

Released 2023-11-15 · Red Hat rating Moderate · View on Red Hat →

Fixed in

8Base-RHMTC-1.8 rhmtc/openshift-migration-ui-rhel8

Fixes 2 records

TI-2023-11360 CVE-2023-26136 · GHSA-72xf-g2v4-qvf3

Prototype pollution in tough-cookie

HIGH 81

Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02627 Published 2023-07-01 Partial fix · 4.1.3 CWE-1321

TI-2022-09442 CVE-2022-25883 · GHSA-c2qf-rxjj-qqgw

Regular expression denial of service in semver

HIGH 72

Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02761 Published 2023-06-21 Partial fix · 7.5.2, 6.3.1 +1 CWE-1333