Red Hat Security AdvisoryRHSA-2024:4455
OpenShift Virtualization 4.16.0 Images security update
Released 2024-07-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- CNV 4.16 for RHEL 9 container-native-virtualization/kubevirt-console-plugin-rhel9, container-native-virtualization/kubevirt-ssp-operator-rhel9, container-native-virtualization/kubevirt-tekton-tasks-create-datavolume-rhel9 +1
Fixes 3 records
Priority HIGH 68
An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensiti…
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00729 · Published 2023-11-08 · Partial fix · 1.6.0, 0.28.0 CWE-352
Priority MEDIUM 41
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01262 · Published 2024-03-05 · Partial fix · 1.33.0 CWE-835
Priority LOW 26
Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.01956 · Published 2024-03-09 · Partial fix · 4.0.1, 3.0.3 +1 CWE-409
