Priority HIGH 68
Envoy is a cloud-native high-performance edge/middle/service proxy.
RHSA-2024:7726
Red Hat OpenShift Service Mesh Containers for 2.6.2
Released 2024-10-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHOSSM 2.6 for RHEL 8 openshift-service-mesh/grafana-rhel8, openshift-service-mesh/istio-cni-rhel8, openshift-service-mesh/istio-must-gather-rhel8 +6
- RHOSSM 2.6 for RHEL 9 openshift-service-mesh/proxyv2-rhel9
Fixes 10 records
Priority HIGH 68
Envoy is a cloud-native high-performance edge/middle/service proxy.
TI-2024-29382 CVE-2024-43788 · GHSA-4vvj-4cpr-p986
DOM Clobbering Gadget found in Webpack's AutoPublicPathRuntimeModule that leads to Cross-site Scripting (XSS)
Priority MEDIUM 62
Webpack is a module bundler.
TI-2024-06729 CVE-2024-7264 · GHSA-97c4-2w4v-c7r8
ASN.1 date parser overread
Priority MEDIUM 48
libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field.
TI-2024-30367 CVE-2024-45296 · GHSA-9wv6-86v2-598j
path-to-regexp outputs backtracking regular expressions
Priority MEDIUM 41
path-to-regexp turns path strings into a regular expressions.
TI-2024-30611 CVE-2024-45590 · GHSA-qwcr-r2fm-qrc7
body-parser vulnerable to denial of service when url encoding is enabled
Priority MEDIUM 40
body-parser is Node.js body parsing middleware.
Priority LOW 34
Envoy is a cloud-native high-performance edge/middle/service proxy.
TI-2024-29394 CVE-2024-43800 · GHSA-cm22-4g7w-348p
serve-static affected by template injection that can lead to XSS
Priority LOW 24
serve-static serves static files.
TI-2024-29393 CVE-2024-43799 · GHSA-m6fv-jmcg-4jfg
send vulnerable to template injection that can lead to XSS
Priority LOW 24
Send is a library for streaming files from the file system as a http response.
TI-2024-29390 CVE-2024-43796 · GHSA-qw6h-vgh9-j6wx
express vulnerable to XSS via response.redirect()
Priority LOW 23
Express.js minimalist web framework for node.