Red Hat OpenShift (Migration Toolkit for Containers): Mehrere Schwachstellen

Summary

Product

Vulnerabilities 4

• High 8.8
  CVE-2022-0512

  Authorization Bypass Through User-Controlled Key in unshiftio/url-parse

  Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6.

  unshiftio unshiftio/url-parse url-parse node-url-parse Debian Ubuntu npm
  Feb 14, 2022
• Medium 6.5
  CVE-2022-0639

  Authorization Bypass Through User-Controlled Key in unshiftio/url-parse

  Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.7.

  unshiftio unshiftio/url-parse url-parse node-url-parse Debian Ubuntu npm
  Feb 17, 2022
• Medium 6.5
  CVE-2022-0686

  Authorization Bypass Through User-Controlled Key in unshiftio/url-parse

  Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8.

  unshiftio unshiftio/url-parse node-url-parse url-parse Debian Ubuntu npm
  Feb 20, 2022
• Medium 6.5
  CVE-2022-0691

  Authorization Bypass Through User-Controlled Key in unshiftio/url-parse

  Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9.

  unshiftio unshiftio/url-parse node-url-parse url-parse Debian Ubuntu npm
  Feb 21, 2022

Revision history

1. 2025-12-16 #3

   Neue Updates von Debian aufgenommen

2. 2023-02-22 #2

   Neue Updates von Debian aufgenommen

3. 2022-09-12 #1

   Initiale Fassung

References

• Red Hat Security Advisory vom 2022-09-12
  https://access.redhat.com/errata/RHSA-2022:6429
• Debian Security Advisory DLA-3336 vom 2023-02-23
  https://lists.debian.org/debian-lts-announce/2023/02/msg00030.html
• Debian Security Advisory DLA-4413 vom 2025-12-16
  https://lists.debian.org/debian-lts-announce/2025/12/msg00024.html