140 matches found
Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.14.40 security, enhancement & bug fix update
Red Hat OpenShift Data Foundation 4.14.40 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.14.40 security, enhancement & bug fix update FIXED BUGS: ==========...
Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.17.28 security, enhancement & bug fix update
Red Hat OpenShift Data Foundation 4.17.28 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.17.28 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-9380: Backport to odf-4.17.z Backport CA related fixes for NooBaa DFBUGS-7336: Backport to odf-4.17.z 5.2...
Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.16.36 security, enhancement & bug fix update
Red Hat OpenShift Data Foundation 4.16.36 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.16.36 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-9792: Use Azure Storage Account GPv2 DFBUGS-9382: Backport to odf-4.16.z Backport to 4.22 Backport CA...
Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Authentication Bypass.
Summary proxy-addr is used by IBM Storage Fusion Data Foundation, which could cause Authentication Bypass. CVE-2026-90711. Vulnerability Details CVEID:CVE-2026-90711 DESCRIPTION: proxy-addr is a Node.js module that determines a request's client address behind trusted reverse proxies, and it backs...
Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Cross-Site Scripting.
Summary ip-address is used by IBM Storage Fusion Data Foundation, which could cause Cross-Site Scripting. CVE-2026-42338. Vulnerability Details CVEID:CVE-2026-42338 DESCRIPTION: ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.1.1,...
Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to XML Injection.
Summary fast-xml-builder is used by IBM Storage Fusion Data Foundation, which could cause XML Injection. CVE-2026-44665. Vulnerability Details CVEID:CVE-2026-44665 DESCRIPTION: fast-xml-builder builds XML from JSON. Prior to 1.1.7, when an input data has quotes in attribute values but process...
Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Denial of Service.
Summary spdystream is used by IBM Storage Fusion Data Foundation, which could cause Denial of Service. CVE-2026-35469. Vulnerability Details CVEID:CVE-2026-35469 DESCRIPTION: spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame...
Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Cross-Site Scripting.
Summary postcss is used by IBM Storage Fusion Data Foundation, which could cause Cross-Site Scripting. CVE-2026-41305. Vulnerability Details CVEID:CVE-2026-41305 DESCRIPTION: PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract...
Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Denial of Service.
Summary compression is used by IBM Storage Fusion Data Foundation, which could cause Denial of Service. CVE-2026-87776 Vulnerability Details CVEID:CVE-2026-87776 DESCRIPTION: compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connection...
Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Denial of Service
Summary fast-xml-parser is used by IBM Storage Fusion Data Foundation, which could cause Denial of Service. CVE-2026-27942, CVE-2026-26278, CVE-2026-33036 Vulnerability Details CVEID:CVE-2026-27942 DESCRIPTION: fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML fro...
Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Information Disclosure
Summary ws is used by IBM Storage Fusion Data Foundation, which could cause Information Disclosure. CVE-2026-45736 Vulnerability Details CVEID:CVE-2026-45736 DESCRIPTION: ws is an open source WebSocket client and server for Node.js. Prior to 8.20.1, the websocket.close implementation is vulnerabl...
Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Denial of Service.
Summary minimatch is used by IBM Storage Fusion Data Foundation, which could cause a Denial of Service. CVE-2026-26996. Vulnerability Details CVEID:CVE-2026-26996 DESCRIPTION: minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 a...
Security Bulletin: IBM Fusion Data Foundation is vulnerable to Denial of Service.
Summary brace-expansion is used by IBM Fusion Data Foundation, which could cause a Denial of Service. CVE-2026-45149. Vulnerability Details CVEID:CVE-2026-45149 DESCRIPTION: The brace-expansion library generates arbitrary strings containing a common prefix and suffix. From 5.0.0 to before 5.0.6,...
Security Bulletin: IBM Fusion Data Foundation is vulnerable to Denial of Service.
Summary picomatch is used by IBM Fusion Data Foundation, which could cause a Denial of Service. CVE-2026-33671, CVE-2026-33672. Vulnerability Details CVEID:CVE-2026-33671 DESCRIPTION: Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to Regul...
Security Bulletin: IBM Fusion Data Foundation is vulnerable to Denial of Service.
Summary fast-xml-parser is used by IBM Fusion Data Foundation, which could cause a Denial of Service. CVE-2026-73569. Vulnerability Details CVEID:CVE-2026-73569 DESCRIPTION: fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks. From 5.9.3 until...
Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Improper Input Validation.
Summary uuid is used by IBM Fusion Data Foundation, which could cause Improper Input Validation. CVE-2026-41907. Vulnerability Details CVEID:CVE-2026-41907 DESCRIPTION: uuid is for the creation of RFC9562 formerly RFC4122 UUIDs. Prior to 14.0.0, v3, v5, and v6 accept external output buffers but d...
CVE-2026-86330
An OS command injection flaw was found in the sethostnameinternal function of NooBaa's clusterinternalapi. This component is responsible for managing the Multi-Cloud Object Gateway in OpenShift Data Foundation. The vulnerability occurs because the hostname parameter is passed directly to a shell...
CVE-2026-86330
An OS command injection flaw was found in the sethostnameinternal function of NooBaa's clusterinternalapi. This component is responsible for managing the Multi-Cloud Object Gateway in OpenShift Data Foundation. The vulnerability occurs because the hostname parameter is passed directly to a shell...
CVE-2026-86330 Noobaa-core: noobaa-core: os command injection in cluster_internal_api.set_hostname_internal
An OS command injection flaw was found in the sethostnameinternal function of NooBaa's clusterinternalapi. This component is responsible for managing the Multi-Cloud Object Gateway in OpenShift Data Foundation. The vulnerability occurs because the hostname parameter is passed directly to a shell...
EUVD-2026-88236
An OS command injection flaw was found in the sethostnameinternal function of NooBaa's clusterinternalapi. This component is responsible for managing the Multi-Cloud Object Gateway in OpenShift Data Foundation. The vulnerability occurs because the hostname parameter is passed directly to a shell...