advanced-cluster-security/rhacs-rhel8-operator vulnerabilities
CVEs whose affected-version data names the advanced-cluster-security/rhacs-rhel8-operator package (go, npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2024-11831Medium· 5.4A flaw was found in npm-serialize-javascript
A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject mali…
▾ SunlitRed Hat · serialize-javascriptEPSS 1.1%via NVD
CVE-2024-3727High· 8.3A flaw was found in the github.com/containers/image library
A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.
▾ TwilightRed Hat · imageEPSS 1.3%via NVD