Red Hat Security Advisory

RHSA-2024:11031

OpenShift Container Platform 4.14.43 security update

Released 2024-12-19 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.14 openshift4/ose-monitoring-plugin-rhel8

Fixes 1 record

TI-2024-14294 CVE-2024-21538 · GHSA-3xgq-45jj-v275

Regular expression denial of service in cross-spawn

HIGH 77

Versions of the package cross-spawn before 6.0.6, from 7.0.0 and before 7.0.5 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper input sanitization.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00868 Published 2024-11-08 Partial fix · 6.0.6, 7.0.5 +1 CWE-1333