TI-2024-30367 CVE-2024-45296 · GHSA-9wv6-86v2-598j
path-to-regexp outputs backtracking regular expressions
Priority MEDIUM 41
path-to-regexp turns path strings into a regular expressions.
RHSA-2025:0664
Release of OpenShift Serverless Logic 1.35.0 security update & enhancements
Released 2025-01-23 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- 8Base-Openshift-Serverless-1.35 openshift-serverless-1/logic-data-index-ephemeral-rhel8, openshift-serverless-1/logic-data-index-postgresql-rhel8, openshift-serverless-1/logic-jobs-service-ephemeral-rhel8 +7
Fixes 3 records
TI-2024-16303 CVE-2024-24786 · GHSA-8r3f-844c-mc37
Infinite loop in JSON unmarshaling in google.golang.org/protobuf
Priority MEDIUM 41
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON.
TI-2024-26868 CVE-2024-40094 · GHSA-h9mq-f6q5-6c8m
GraphQL Java (aka graphql-java) before 21.5 does not properly consider…
Priority LOW 26
GraphQL Java (aka graphql-java) before 21.5 does not properly consider ExecutableNormalizedFields (ENFs) as part of preventing denial of service via introspection queries.