TI-2024-32607 CVE-2024-48910 · GHSA-p3vf-v8qc-cwcr
DOMPurify vulnerable to tampering by prototype polution
Priority MEDIUM 51
DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG.
RHSA-2025:0654
OpenShift Container Platform 4.17.14 bug fix and security update
Released 2025-01-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.17 openshift4/oc-mirror-plugin-rhel9, openshift4/ose-agent-installer-api-server-rhel9, openshift4/ose-baremetal-cluster-api-controllers-rhel9 +6
Fixes 7 records
TI-2025-15573 CVE-2025-21613 · GHSA-v725-9546-7q7m
go-git has an Argument Injection via the URL field
Priority MEDIUM 44
go-git is a highly extensible git implementation library written in pure Go.
TI-2024-16303 CVE-2024-24786 · GHSA-8r3f-844c-mc37
Infinite loop in JSON unmarshaling in google.golang.org/protobuf
Priority MEDIUM 41
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON.
TI-2025-15574 CVE-2025-21614 · GHSA-r9px-m959-cxf4
go-git clients vulnerable to DoS via maliciously crafted Git server replies
Priority MEDIUM 40
go-git is a highly extensible git implementation library written in pure Go.
TI-2024-30408 CVE-2024-45338 · GHSA-w32m-9786-jp63
Non-linear parsing of case-insensitive content in golang.org/x/net/html
Priority LOW 32
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing.
TI-2023-23794 CVE-2023-44270 · GHSA-7fh5-64p2-3v2j
An issue was discovered in PostCSS before 8.4.31.
Priority LOW 32
An issue was discovered in PostCSS before 8.4.31.
TI-2024-36887 CVE-2024-55565 · GHSA-mwcw-c2x4-8c55
nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values.
Priority LOW 21
nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values.