Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/ceph@2:19.2.1-292?arch=el9cp
purl pkg:rpm/redhat/ceph@2:19.2.1-292?arch=el9cp
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.4
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-1yz5-m9s7-nqdm
Aliases:
CVE-2024-47866
rgw: RGW DoS attack with empty HTTP header in S3 object copy There are no reported fixed by versions.
VCID-h8nr-tcb7-93em
Aliases:
CVE-2024-11831
GHSA-76p7-773f-r4q5
Cross-site Scripting (XSS) in serialize-javascript A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject malicious code. This code could be executed when deserialized by a web browser, causing Cross-site scripting (XSS) attacks. This issue is critical in environments where serialized data is sent to web clients, potentially compromising the security of the website or web application using this package. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-19T06:26:21.878985+00:00 RedHat Importer Affected by VCID-h8nr-tcb7-93em https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-11831.json 38.4.0
2026-04-01T13:45:12.457233+00:00 RedHat Importer Affected by VCID-h8nr-tcb7-93em https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-11831.json 38.0.0
2026-04-01T13:35:00.212931+00:00 RedHat Importer Affected by VCID-1yz5-m9s7-nqdm https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-47866.json 38.0.0