Read the docs
Red Hat Security Advisory

RHSA-2025:0164

Red Hat OpenShift Data Foundation 4.15.9 Bug Fix Update

Released 2025-01-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 7 records

TI-2023-11360 CVE-2023-26136 · GHSA-72xf-g2v4-qvf3

Prototype pollution in tough-cookie

Priority HIGH 81

Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02627 Published 2023-07-01 Partial fix · 4.1.3 CWE-1321
TI-2024-14294 CVE-2024-21538 · GHSA-3xgq-45jj-v275

Regular expression denial of service in cross-spawn

Priority HIGH 77

Versions of the package cross-spawn before 6.0.6, from 7.0.0 and before 7.0.5 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper input sanitization.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00868 Published 2024-11-08 Partial fix · 6.0.6, 7.0.5 +1 CWE-1333
TI-2023-11514 CVE-2023-26364 · GHSA-hpx4-r86g-5jrg

Denial of Service of regular expression in package @adobe/css-tools

Priority MEDIUM 63

@adobe/css-tools version 4.3.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a minor denial of service while attempting to parse CSS.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01154 Published 2023-11-17 Partial fix · 4.3.1 CWE-20