Important: Red Hat Security Advisory: RHODF-4.18-RHEL-9 enhancement, bug fix and security update

Updated images that include numerous enhancements, security, and bug fixes are now available for Red Hat OpenShift Data Foundation 4.18.0 on Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System...

CVE-2024-21528

All versions of the package node-gettext are vulnerable to Prototype Pollution via the addTranslations function in gettext.js due to improper user input sanitization...

CVE-2024-21528

All versions of the package node-gettext are vulnerable to Prototype Pollution via the addTranslations function in gettext.js due to improper user input sanitization...

CVE-2024-21528

CVE-2024-21528 affects the Node package node-gettext. The vulnerability is a Prototype Pollution flaw in the addTranslations() function of gettext.js caused by improper input sanitization. Affected versions are all reported versions; explicit exploit details or in-the-wild activity are not provid...

@bbc/timeline-state-resolver-tools (>=9.4.0-nightly-release53-6a8a2347-20250820-110110.0 <=10.0.0-nightly-release53-20251030-091938-982ec310.0), @bitrefill/airfill-widget (>=4.2.2 <=4.8.3) +159 more potentially affected by CVE-2024-21528 via node-gettext (>=0.1.2 <=3.0.1)

node-gettext NPM version =0.1.2, =9.4.0-nightly-release53-6a8a2347-20250820-110110.0, =4.2.2, =2.2.0, =2.2.0, =0.9.1, =1.1.2, =4.1.0-alpha.1, =0.0.4, =5.2.0-alpha.13, =5.2.0, =1.0.6, =1.0.17, =1.0.3, =4.1.2, =4.1.4 and more Source cves: CVE-2024-21528 Source advisory: SNYK:JS-NODEGETTEXT-6100943...