Red Hat Security Advisory

RHSA-2024:10907

Red Hat OpenShift Service Mesh Containers for 2.4.13

Released 2024-12-10 · Red Hat rating Low · View on Red Hat →

Fixed in

RHOSSM 2.4 for RHEL 8 openshift-service-mesh/grafana-rhel8, openshift-service-mesh/istio-cni-rhel8, openshift-service-mesh/kiali-rhel8 +3

Fixes 1 record

TI-2024-14294 CVE-2024-21538 · GHSA-3xgq-45jj-v275

Regular expression denial of service in cross-spawn

HIGH 77

Versions of the package cross-spawn before 6.0.6, from 7.0.0 and before 7.0.5 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper input sanitization.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00868 Published 2024-11-08 Partial fix · 6.0.6, 7.0.5 +1 CWE-1333