Red Hat Security AdvisoryRHSA-2024:10962
Red Hat OpenShift distributed tracing platform (Jaeger) 3.4 release
Released 2024-12-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift distributed tracing 3.4 registry.redhat.io/rhosdt/jaeger-query-rhel8
Fixes 9 records
Priority HIGH 77
Versions of the package http-proxy-middleware before 2.0.7, from 3.0.0 and before 3.0.3 are vulnerable to Denial of Service (DoS) due to an UnhandledPromiseRejection error thrown by micromatch.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.01034 · Published 2024-10-19 · Partial fix · 2.0.7, 3.0.3 CWE-400
Priority MEDIUM 62
Vite a frontend build tooling framework for javascript.
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00636 · Published 2024-09-17 · Partial fix · 5.4.6, 5.3.6 +5 CWE-79
Priority MEDIUM 60
Rollup is a module bundler for JavaScript.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00742 · Published 2024-09-23 · Partial fix · 3.29.5, 4.22.4 +1 CWE-79
Priority MEDIUM 55
Vite a frontend build tooling framework for javascript.
CVSS 3.1MEDIUM 4.8· Adjacent network · No auth · User interaction · EPSS 0.01105 · Published 2024-09-17 · Partial fix · 5.4.6, 5.3.6 +5 CWE-200
Priority MEDIUM 41
path-to-regexp turns path strings into a regular expressions.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00932 · Published 2024-09-09 · Partial fix · 0.1.10, 8.0.0 +3 CWE-1333
Priority MEDIUM 40
body-parser is Node.js body parsing middleware.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00824 · Published 2024-09-10 · Partial fix · 1.20.3 CWE-405
Priority LOW 24
serve-static serves static files.
CVSS 3.1MEDIUM 5.0· Network · No auth · User interaction · EPSS 0.00631 · Published 2024-09-10 · Partial fix · 1.16.0, 2.1.0 CWE-79
Priority LOW 24
Send is a library for streaming files from the file system as a http response.
CVSS 3.1MEDIUM 5.0· Network · No auth · User interaction · EPSS 0.00541 · Published 2024-09-10 · Partial fix · 0.19.0 CWE-79
Priority LOW 23
Express.js minimalist web framework for node.
CVSS 3.1MEDIUM 5.0· Network · No auth · User interaction · EPSS 0.00486 · Published 2024-09-10 · Partial fix · 4.20.0, 5.0.0 CWE-79
THREATIST.IORead the docs