Red Hat Security AdvisoryRHSA-2024:8023
Release of OpenShift Serverless Logic 1.34.0 security update & enhancements
Released 2024-10-14 · Red Hat rating Important · View on Red Hat →
Fixed in
- 8Base-Openshift-Serverless-1.34 openshift-serverless-1/logic-data-index-ephemeral-rhel8, openshift-serverless-1/logic-data-index-postgresql-rhel8, openshift-serverless-1/logic-jobs-service-ephemeral-rhel8 +7
Fixes 6 records
Priority HIGH 66
axios 1.7.2 allows SSRF via unexpected behavior where requests for path relative URLs get processed as protocol relative URLs.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01207 · Published 2024-08-09 · Partial fix · 1.7.4 CWE-918
Priority MEDIUM 62
Webpack is a module bundler.
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00959 · Published 2024-08-27 · Partial fix · 5.94.0 CWE-79
Priority LOW 37
In Eclipse Vert.x version 4.3.0 to 4.5.9, the gRPC server does not limit the maximum length of message payload (Maven GAV: io.vertx:vertx-grpc-server and io.vertx:vertx-grpc-client).
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.0058 · Published 2024-09-04 · Partial fix · 4.5.10 CWE-770
Priority LOW 24
serve-static serves static files.
CVSS 3.1MEDIUM 5.0· Network · No auth · User interaction · EPSS 0.00631 · Published 2024-09-10 · Partial fix · 1.16.0, 2.1.0 CWE-79
Priority LOW 24
Send is a library for streaming files from the file system as a http response.
CVSS 3.1MEDIUM 5.0· Network · No auth · User interaction · EPSS 0.00541 · Published 2024-09-10 · Partial fix · 0.19.0 CWE-79
Priority LOW 23
Express.js minimalist web framework for node.
CVSS 3.1MEDIUM 5.0· Network · No auth · User interaction · EPSS 0.00486 · Published 2024-09-10 · Partial fix · 4.20.0, 5.0.0 CWE-79
THREATIST.IORead the docs