TI-2024-35311 CVE-2024-52798 · GHSA-rhx6-c78j-4q9w
path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x
Priority MEDIUM 41
path-to-regexp turns path strings into a regular expressions.
RHSA-2025:1051
Red Hat OpenShift Service Mesh Containers for 2.5.8
Released 2025-02-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHOSSM 2.5 for RHEL 8 openshift-service-mesh/kiali-ossmc-rhel8, openshift-service-mesh/kiali-rhel8, openshift-service-mesh/proxyv2-rhel8
Fixes 3 records
TI-2024-30408 CVE-2024-45338 · GHSA-w32m-9786-jp63
Non-linear parsing of case-insensitive content in golang.org/x/net/html
Priority LOW 32
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing.
TI-2024-36887 CVE-2024-55565 · GHSA-mwcw-c2x4-8c55
nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values.
Priority LOW 21
nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values.