Red Hat Security AdvisoryRHSA-2024:1570
ACS 4.4 enhancement and security update
Released 2024-03-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHACS 4.4 for RHEL 8 advanced-cluster-security/rhacs-central-db-rhel8, advanced-cluster-security/rhacs-collector-rhel8, advanced-cluster-security/rhacs-collector-slim-rhel8 +10
Fixes 6 records
Priority MEDIUM 63
Versions of the package graphql from 16.3.0 and before 16.8.1 are vulnerable to Denial of Service (DoS) due to insufficient checks in the OverlappingFieldsCanBeMergedRule.ts file when parsing large queries.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01454 · Published 2023-09-20 · Partial fix · 16.8.1 CWE-400
Priority MEDIUM 48
An issue was discovered in Cloud Native Computing Foundation (CNCF) Helm through 3.13.3.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.0068 · Published 2024-03-03 · Partial fix CWE-200
Priority MEDIUM 41
Helm is a package manager for Charts for Kubernetes.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00926 · Published 2024-02-21 · Partial fix · 3.14.2 CWE-457
Priority LOW 34
A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00698 · Published 2024-01-12 · Partial fix · 5.11.0 CWE-20
Priority LOW 32
The HTTP/1 client does not fully validate the contents of the Host header.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01453 · Published 2023-07-11 · Partial fix · 1.19.11, 1.20.6 CWE-436
Priority LOW 26
Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.01956 · Published 2024-03-09 · Partial fix · 4.0.1, 3.0.3 +1 CWE-409
THREATIST.IORead the docs