openshift data foundation 4.14 Schwachstellen (CVE)

Für openshift data foundation 4.14 veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

3 Ergebnisse
8.1Hoch
CVE-2026-42945

NGINX ngx_http_rewrite_module vulnerability

F5 NGINX Plus; F5 NGINX Open Source; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when the rewrite directive is followed by a rewrite, if, or set directive and an unnamed Perl-Compatible Regular Expression (PCRE) capture (…

68%EPSS
6.4Mittel
CVE-2025-7195

Operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd

operator-framework operator-sdk; Red Hat RHEL-9-CNV-4.17; Red Hat RHEL-9-CNV-4.18; Red Hat RHEL-9-CNV-4.20

Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID. Operator-SDK before 0.15.2 provided a script, user_setup, which modifies the permissions of the /etc/passwd file to 664 duri…

5.4Mittel
CVE-2024-11831

Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript

serialize-javascript; Red Hat Red Hat Advanced Cluster Security 4.4; Red Hat Red Hat Advanced Cluster Security 4.5; Red Hat Red Hat Ceph Storage 7.1

A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject malicious code. This code …

1.1%EPSS