Search for packages
| purl | pkg:rpm/redhat/nodejs-node-uuid@1.4.7-1?arch=el7 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-axpb-ubch-tuer
Aliases: CVE-2016-3738 |
origin: pod update allows docker socket access via build-pod | There are no reported fixed by versions. |
|
VCID-bf32-nkkg-m7ad
Aliases: CVE-2016-3703 |
3: Untrusted content loaded via the API proxy can access web console credentials on the same domain | There are no reported fixed by versions. |
|
VCID-ep8y-hq9y-afcu
Aliases: CVE-2017-15138 |
atomic-openshift: cluster-reader can escalate to creating builds via webhooks in any project | There are no reported fixed by versions. |
|
VCID-jqgq-yvxr-r7hs
Aliases: CVE-2017-12195 |
3: authentication bypass for elasticsearch with external routes | There are no reported fixed by versions. |
|
VCID-u9ph-5sbd-mfgp
Aliases: CVE-2018-1000169 GHSA-cpw3-x7gf-p872 |
Information Exposure Jenkins allows unauthorized attackers to confirm the existence of agents or views with an attacker-specified name by sending a CLI command to Jenkins. | There are no reported fixed by versions. |
|
VCID-vtvy-ec7a-xua9
Aliases: CVE-2017-15137 |
atomic-openshift: image import whitelist can be bypassed by creating an imagestream or using oc tag | There are no reported fixed by versions. |
|
VCID-xy6m-6cfr-kfa6
Aliases: CVE-2016-3708 |
3: s2i builds implicitly perform docker builds | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||