Red Hat OpenShift: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• High 7.4
  CVE-2024-29180

  webpack-dev-middleware Path Traversal vulnerability

  Prior to versions 7.1.0, 6.1.2, and 5.3.4, the webpack-dev-middleware development middleware for devpack does not validate the supplied URL address sufficiently before returning the local file. It is possible to access any file on the developer's machine. The…

  webpack webpack-dev-middleware katib-suggestion-hyperopt katib-earlystopping Wolfi npm
  Mar 21, 2024
• Medium 4.8
  CVE-2024-31990

  Argo CD' API server does not enforce project sourceNamespaces

  Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. The API server does not enforce project sourceNamespaces which allows attackers to use the UI to edit resources which should only be mutable via gitops. This vulenrability is fixed in 2…

  argoproj Argo CD github.com/argoproj/argo-cd github.com/argoproj/argo-cd/v2 Go
  Apr 15, 2024

Revision history

1. 2026-08-31 #9

   Neue Updates von Red Hat aufgenommen

2. 2025-06-04 #8

   Neue Updates von Red Hat aufgenommen

3. 2024-09-25 #7

   Neue Updates von Red Hat aufgenommen

4. 2024-07-25 #6

   Neue Updates von Red Hat aufgenommen

5. 2024-07-11 #5

   Neue Updates von Red Hat aufgenommen

6. 2024-07-10 #4

   Neue Updates von Red Hat aufgenommen

7. 2024-06-19 #3

   Neue Updates von Red Hat aufgenommen

8. 2024-05-20 #2

   Neue Updates von Red Hat aufgenommen

9. 2024-05-12 #1

   Initiale Fassung

References

• Red Hat Security Advisory vom 2024-05-12
  https://access.redhat.com/errata/RHSA-2024:2815
• Red Hat Security Advisory vom 2024-05-12
  https://access.redhat.com/errata/RHSA-2024:2816
• Red Hat Security Advisory vom 2024-05-12
  https://access.redhat.com/errata/RHSA-2024:2817
• Red Hat Security Advisory RHSA-2024:2941 vom 2024-05-21
  https://access.redhat.com/errata/RHSA-2024:2941
• Red Hat Security Advisory RHSA-2024:3989 vom 2024-06-20
  https://access.redhat.com/errata/RHSA-2024:3989
• Red Hat Security Advisory RHSA-2024:4460 vom 2024-07-10
  https://access.redhat.com/errata/RHSA-2024:4460
• Red Hat Security Advisory RHSA-2024:4520 vom 2024-07-11
  https://access.redhat.com/errata/RHSA-2024:4520
• Red Hat Security Advisory RHSA-2024:4873 vom 2024-07-26
  https://access.redhat.com/errata/RHSA-2024:4873
• Red Hat Security Advisory RHSA-2024:7164 vom 2024-09-26
  https://access.redhat.com/errata/RHSA-2024:7164
• Red Hat Security Advisory RHSA-2025:8551 vom 2025-06-05
  https://access.redhat.com/errata/RHSA-2025:8551
• Red Hat Security Advisory RHSA-2026:61783 vom 2026-09-01
  https://access.redhat.com/errata/RHSA-2026:61783