Priority HIGH 80
Envoy is a cloud-native, open source edge and service proxy.
RHSA-2024:7725
Red Hat OpenShift Service Mesh Containers for 2.5.5
Released 2024-10-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHOSSM 2.5 for RHEL 8 openshift-service-mesh/grafana-rhel8, openshift-service-mesh/istio-cni-rhel8, openshift-service-mesh/istio-must-gather-rhel8 +5
Fixes 9 records
TI-2024-21842 CVE-2024-32976
Envoy can enter an endless loop while decompressing Brotli data with extra input
Priority HIGH 72
Envoy is a cloud-native, open source edge and service proxy.
Priority HIGH 68
Envoy is a cloud-native high-performance edge/middle/service proxy.
TI-2024-29382 CVE-2024-43788 · GHSA-4vvj-4cpr-p986
DOM Clobbering Gadget found in Webpack's AutoPublicPathRuntimeModule that leads to Cross-site Scripting (XSS)
Priority MEDIUM 62
Webpack is a module bundler.
TI-2024-30611 CVE-2024-45590 · GHSA-qwcr-r2fm-qrc7
body-parser vulnerable to denial of service when url encoding is enabled
Priority MEDIUM 40
body-parser is Node.js body parsing middleware.
Priority MEDIUM 40
Envoy is a cloud-native, open source edge and service proxy.
Priority LOW 36
Envoy is a cloud-native, open source edge and service proxy.
TI-2024-29394 CVE-2024-43800 · GHSA-cm22-4g7w-348p
serve-static affected by template injection that can lead to XSS
Priority LOW 24
serve-static serves static files.
TI-2024-29393 CVE-2024-43799 · GHSA-m6fv-jmcg-4jfg
send vulnerable to template injection that can lead to XSS
Priority LOW 24
Send is a library for streaming files from the file system as a http response.