Red Hat Security Advisory

RHSA-2024:10908

Red Hat OpenShift Service Mesh Containers for 2.5.7

Released 2024-12-10 · Red Hat rating Moderate · View on Red Hat →

Fixed in

RHOSSM 2.5 for RHEL 8 openshift-service-mesh/kiali-ossmc-rhel8, openshift-service-mesh/kiali-rhel8

Fixes 2 records

TI-2024-14294 CVE-2024-21538 · GHSA-3xgq-45jj-v275

Regular expression denial of service in cross-spawn

HIGH 77

Versions of the package cross-spawn before 6.0.6, from 7.0.0 and before 7.0.5 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper input sanitization.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00868 Published 2024-11-08 Partial fix · 6.0.6, 7.0.5 +1 CWE-1333

TI-2023-23794 CVE-2023-44270 · GHSA-7fh5-64p2-3v2j

An issue was discovered in PostCSS before 8.4.31.

LOW 32

An issue was discovered in PostCSS before 8.4.31.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00973 Published 2023-09-29 Partial fix · 8.4.31 CWE-74