RHSA-2025:0082HighCVSS 8.2

Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.16.5 Bug Fix Update

Published
January 8, 2025
Last Modified
June 28, 2026

🔗 CVE IDs covered (10)

CVE-2024-21538 →CVE-2024-24791 →CVE-2024-43799 →CVE-2024-43800 →CVE-2024-55565 →CVE-2023-26136 →CVE-2023-26364 →CVE-2024-43796 →CVE-2024-45296 →CVE-2024-48910 →

📋 Description

CVE-2023-26136 — tough-cookie: prototype pollution in cookie memstore CVE-2023-26364 — css-tools: Improper Input Validation causes Denial of Service via Regular Expression CVE-2024-21538 — cross-spawn: regular expression denial of service CVE-2024-24791 — net/http: Denial of service due to improper 100-continue handling in net/http CVE-2024-43796 — express: Improper Input Handling in Express Redirects CVE-2024-43799 — send: Code Execution Vulnerability in Send Library CVE-2024-43800 — serve-static: Improper Sanitization in serve-static CVE-2024-45296 — path-to-regexp: Backtracking regular expressions cause ReDoS CVE-2024-48910 — dompurify: DOMPurify vulnerable to tampering by prototype pollution CVE-2024-55565 — nanoid: nanoid mishandles non-integer values

🔗 References (13)