TI-2023-24278 CVE-2023-45288 · GHSA-4v7x-pqxf-cx7m
HTTP/2 CONTINUATION flood in net/http
Priority HIGH 81
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames.
RHSA-2024:3314
OpenShift Virtualization 4.15.2 Images security update
Released 2024-05-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- CNV 4.15 for RHEL 9 container-native-virtualization/aaq-controller-rhel9, container-native-virtualization/aaq-operator-rhel9, container-native-virtualization/aaq-server-rhel9 +47
Fixes 3 records
TI-2023-24614 CVE-2023-45857 · GHSA-wf5p-g6vw-rhxx
An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN…
Priority HIGH 68
An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensiti…
TI-2023-11383 CVE-2023-26159 · GHSA-jchw-25xp-jwwc
Improper input validation in follow-redirects
Priority HIGH 65
Versions of the package follow-redirects before 1.15.4 are vulnerable to Improper Input Validation due to the improper handling of URLs by the url.parse() function.