Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/ovirt-engine-ui-extensions@1.2.7-1?arch=el8ev
purl pkg:rpm/redhat/ovirt-engine-ui-extensions@1.2.7-1?arch=el8ev
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.5
Vulnerabilities affecting this package (4)
Vulnerability Summary Fixed by
VCID-4f1w-xpyy-2fcf
Aliases:
CVE-2020-28469
GHSA-ww39-953v-wcq6
glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator. There are no reported fixed by versions.
VCID-864e-hkby-qfh6
Aliases:
CVE-2021-23358
GHSA-cf4h-3jhx-xvhq
Arbitrary Code Execution in underscore The package `underscore` from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Execution via the template function, particularly when a variable property is passed as an argument as it is not sanitized. There are no reported fixed by versions.
VCID-q32y-yvrx-wkby
Aliases:
CVE-2020-7733
GHSA-662x-fhqg-9p8v
Regular Expression Denial of Service in ua-parser-js The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex for Redmi Phones and Mi Pad Tablets UA. There are no reported fixed by versions.
VCID-tsp3-tyjt-h7bk
Aliases:
CVE-2021-23343
GHSA-hj48-42vr-x3v9
Regular Expression Denial of Service in path-parse Affected versions of npm package `path-parse` are vulnerable to Regular Expression Denial of Service (ReDoS) via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T14:04:30.415518+00:00 RedHat Importer Affected by VCID-q32y-yvrx-wkby https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7733.json 38.0.0
2026-04-01T14:03:33.270581+00:00 RedHat Importer Affected by VCID-4f1w-xpyy-2fcf https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-28469.json 38.0.0
2026-04-01T14:02:41.177366+00:00 RedHat Importer Affected by VCID-864e-hkby-qfh6 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-23358.json 38.0.0
2026-04-01T14:02:21.745536+00:00 RedHat Importer Affected by VCID-tsp3-tyjt-h7bk https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-23343.json 38.0.0