TI-2024-22527 CVE-2024-34069 · GHSA-2g68-c3qc-8985
Werkzeug's improper usage of a pathname and improper CSRF protection results in the remote command execution
Priority MEDIUM 41
Werkzeug is a comprehensive WSGI web application library.
RHSA-2025:9340
Updated 7.1 container image is now available in the Red Hat Ecosystem Catalog.
Released 2025-06-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Ceph Storage 7.1 Tools rhceph/grafana-rhel9, rhceph/rhceph-7-rhel9, rhceph/rhceph-promtail-rhel9
Fixes 3 records
TI-2024-16178 CVE-2024-24557 · GHSA-xw73-rw38-6vjc
Moby classic builder cache poisoning
Priority LOW 34
Moby is an open-source project created by Docker to enable software containerization.
TI-2024-30408 CVE-2024-45338 · GHSA-w32m-9786-jp63
Non-linear parsing of case-insensitive content in golang.org/x/net/html
Priority LOW 32
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing.