Red Hat Security AdvisoryRHSA-2025:1865
RHODF-4.15-RHEL-9 security update
Released 2025-02-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHODF 4.15 for RHEL 9 odf4/ocs-client-console-rhel9, odf4/ocs-metrics-exporter-rhel9, odf4/ocs-rhel9-operator +4
Fixes 4 records
Priority LOW 32
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01072 · Published 2024-12-18 · Partial fix · 0.33.0 CWE-1333
Priority LOW 32
An issue was discovered in PostCSS before 8.4.31.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00973 · Published 2023-09-29 · Partial fix · 8.4.31 CWE-74
Priority LOW 27
All versions of the package node-gettext are vulnerable to Prototype Pollution via the addTranslations() function in gettext.js due to improper user input sanitization.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00567 · Published 2024-09-10 · Partial fix CWE-1321
Priority LOW 27
go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file.
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00358 · Published 2024-06-24 · Partial fix · 0.7.7 CWE-532
