Search for packages
| purl | pkg:rpm/redhat/openshift-serverless-1-eventing-storage-version-migration-rhel8@container-1.8?arch=0-4 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 3.4 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-12jb-hpsk-aaak
Aliases: CVE-2023-24539 |
Angle brackets (<>) are not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character can result in unexpectedly closing the CSS context and allowing for injection of unexpected HTML, if executed with untrusted input. | There are no reported fixed by versions. |
|
VCID-7wck-mgyr-aaap
Aliases: CVE-2023-29400 |
Templates containing actions in unquoted HTML attributes (e.g. "attr={{.}}") executed with empty input can result in output with unexpected results when parsed due to HTML normalization rules. This may allow injection of arbitrary attributes into tags. | There are no reported fixed by versions. |
|
VCID-kye6-bzhe-aaar
Aliases: CVE-2023-3089 |
A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|