Skip to content
OpenAdvisories
High RHSA-2022:6272 2 CVEs

Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.0.11 security update

Published Sep 30, 2024 · Updated Oct 13, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · Service Mesh 2 service_mesh:2.0::el8 servicemesh-prometheus 0:2.14.0-18.el8.1

Vulnerabilities 2

  • High 7.5
    CVE-2022-24785 Public exploit EPSS 14%

    Path Traversal in Moment.js

    Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates. A path traversal vulnerability impacts npm (server) users of Moment.js between versions 1.0.1 and 2.29.1, especially if a user-provided locale string is direct…

    moment moment node-moment node-moment Debian Ubuntu npm NuGet
  • High 7.5
    CVE-2022-31129

    Inefficient Regular Expression Complexity in moment

    moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Affected versions of moment were found to use an inefficient parsing algorithm. Specifically using string-to-date parsing in moment (more specifically rfc2822 par…

    moment moment mediawiki wordpress Debian Ubuntu npm NuGet

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2072009
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2105075
  • article
    https://issues.redhat.com/browse/OSSM-1864
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6272.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-24785
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-24785
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-24785
  • article
    https://github.com/moment/moment/security/advisories/GHSA-8hfj-j24r-96c4
  • report
    https://access.redhat.com/security/cve/CVE-2022-31129
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-31129
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-31129
  • article
    https://github.com/moment/moment/security/advisories/GHSA-wc69-rhjr-hc9g