Red Hat Security Advisory

RHSA-2024:0853

Network Observability 1.5.0 for OpenShift

Released 2024-02-21 · Red Hat rating Moderate · View on Red Hat →

Fixed in

NETOBSERV 1.5 for RHEL 9 network-observability/network-observability-console-plugin-rhel9

Fixes 1 record

TI-2023-11383 CVE-2023-26159 · GHSA-jchw-25xp-jwwc

Improper input validation in follow-redirects

HIGH 65

Versions of the package follow-redirects before 1.15.4 are vulnerable to Improper Input Validation due to the improper handling of URLs by the url.parse() function.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00797 Published 2024-01-02 Partial fix · 1.15.4 CWE-20