Red Hat Security Advisory

RHSA-2024:2817

Errata Advisory for Red Hat OpenShift GitOps v1.10.5 security update

Released 2024-05-10 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift GitOps 1.10 openshift-gitops-1/argo-rollouts-rhel8, openshift-gitops-1/argocd-rhel8, openshift-gitops-1/console-plugin-rhel8 +6

Fixes 1 record

TI-2024-19349 CVE-2024-29180 · GHSA-wr3j-pwj9-hqq6

webpack-dev-middleware Path Traversal vulnerability

HIGH 66

Prior to versions 7.1.0, 6.1.2, and 5.3.4, the webpack-dev-middleware development middleware for devpack does not validate the supplied URL address sufficiently before returning the local file.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01226 Published 2024-03-21 Partial fix · 7.1.0, 6.1.2 +1 CWE-22