Red Hat Security Advisory

RHSA-2024:10986

Red Hat OpenShift Data Foundation 4.17.1 Bug Fix Update

Released 2024-12-12 · Red Hat rating Low · View on Red Hat →

Fixed in

RHODF 4.17 for RHEL 9 odf4/mcg-core-rhel9

Fixes 1 record

TI-2024-14294 CVE-2024-21538 · GHSA-3xgq-45jj-v275

Regular expression denial of service in cross-spawn

HIGH 77

Versions of the package cross-spawn before 6.0.6, from 7.0.0 and before 7.0.5 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper input sanitization.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00868 Published 2024-11-08 Partial fix · 6.0.6, 7.0.5 +1 CWE-1333