VDB
RHSA-2021%3A1499
RHSA-2021%3A1499
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in nodejs-glob-parent. The enclosure regex used to check for glob enclosures containing backslashes is vulnerable to Regular Expression Denial of Service attacks. This flaw allows an attacker to cause a denial of service if they can supply a malicious string to the glob-parent function. The highest threat from this vulnerability is to system availability.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | rhacm2/registration-rhel8-operator@sha256:5464392f7e0577f0676d7e4695650ac2a852144cefb40e49e9c2470a6580f5f3_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | rhacm2/registration-rhel8-operator@sha256:5464392f7e0577f0676d7e4695650ac2a852144cefb40e49e9c2470a6580f5f3_amd64 |
| Red Hat | rhacm2/console-rhel8@sha256:1dba9558579be6b3cfa2c9d8ba68b9d773a92280c56e6889a5b6ca2aa64478ce_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | * |
| Red Hat | rhacm2/governance-policy-spec-sync-rhel8@sha256:6310565d0f793a3b07d594094fc4e2afd04a8f7046f9ac3f7fabbaea23dda3c6_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | rhacm2/governance-policy-spec-sync-rhel8@sha256:6310565d0f793a3b07d594094fc4e2afd04a8f7046f9ac3f7fabbaea23dda3c6_amd64 |
| Red Hat | rhacm2/endpoint-component-rhel8-operator@sha256:9ebec2eded2b5251dcf909334441bf5c2efd20e3781669967ec9f8f787a11be5_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | rhacm2/endpoint-component-rhel8-operator@sha256:9ebec2eded2b5251dcf909334441bf5c2efd20e3781669967ec9f8f787a11be5_s390x |
| Red Hat | rhacm2/multiclusterhub-rhel8@sha256:2d27e1a724488cd35d397a71734102d9f1d7b546502ca045dae9c9519c58516f_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | rhacm2/multiclusterhub-rhel8@sha256:2d27e1a724488cd35d397a71734102d9f1d7b546502ca045dae9c9519c58516f_amd64 |
| Red Hat | rhacm2/observatorium-rhel8-operator@sha256:ed5b52c482d9397d867ab48f9b1f44ced433a7633473031fcb4dfda18b8df9f9_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | rhacm2/observatorium-rhel8-operator@sha256:ed5b52c482d9397d867ab48f9b1f44ced433a7633473031fcb4dfda18b8df9f9_amd64 |
| Red Hat | rhacm2/observatorium-rhel8@sha256:6eae25ed1f8eb0ef7c04dbe51dc78060ff21430ef5f16dfaf99e3c68c8c069e9_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | * |
| Red Hat | rhacm2/cert-manager-webhook-rhel8@sha256:6c6c2e1593e7e06bbe68f639df55aa975a40355d2032b2cfcd8f033596465e55_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | rhacm2/cert-manager-webhook-rhel8@sha256:6c6c2e1593e7e06bbe68f639df55aa975a40355d2032b2cfcd8f033596465e55_amd64 |
| Red Hat | rhacm2/acm-must-gather-rhel8@sha256:0bb29d1cba22518007974c7bbab7b4617e2ceab585e60c625d24d87502da6b45_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | rhacm2/acm-must-gather-rhel8@sha256:0bb29d1cba22518007974c7bbab7b4617e2ceab585e60c625d24d87502da6b45_amd64 |
| Red Hat | rhacm2/multicluster-operators-application-rhel8@sha256:3826ed5fd59605642b3124d16f599ed28ca752d9f9d21e8ca5d9cbcb078b0f0b_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | * |
| Red Hat | rhacm2/multicluster-observability-rhel8-operator@sha256:0827a73839aa2c20ba100b9afdc61ea72cb652d7032ed53cb6ba94f602d2571a_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | rhacm2/multicluster-observability-rhel8-operator@sha256:0827a73839aa2c20ba100b9afdc61ea72cb652d7032ed53cb6ba94f602d2571a_amd64 |
| Red Hat | rhacm2/metrics-collector-rhel8@sha256:453bb4c7b5fbf42b71d0b1b4b94b80a764cc73728f255ec71c1305240cbbecd0_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | rhacm2/metrics-collector-rhel8@sha256:453bb4c7b5fbf42b71d0b1b4b94b80a764cc73728f255ec71c1305240cbbecd0_s390x |
| Red Hat | rhacm2/rcm-controller-rhel8@sha256:0ac5013e5f94f90c3af74dbe8dca14de51fd7273487254e3d04cfe3e03f98c44_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | rhacm2/rcm-controller-rhel8@sha256:0ac5013e5f94f90c3af74dbe8dca14de51fd7273487254e3d04cfe3e03f98c44_amd64 |
| Red Hat | rhacm2/search-collector-rhel8@sha256:097db2dbcdd14bfa04e9db4f834b5d52e2f1bdd10c33f50f4d770fee4ae37e85_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | * |
| Red Hat | rhacm2/klusterlet-addon-lease-controller-rhel8@sha256:2cf21a08530390604004e651c1ac6a3333940c38486e0754e4368698021eb13e_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | rhacm2/klusterlet-addon-lease-controller-rhel8@sha256:2cf21a08530390604004e651c1ac6a3333940c38486e0754e4368698021eb13e_amd64 |
| Red Hat | rhacm2/submariner-addon-rhel8@sha256:358bf8fc2ae871720f99ed56a2e6c5343f4e4526cd6d3404e2e41e42564e2c23_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | rhacm2/submariner-addon-rhel8@sha256:358bf8fc2ae871720f99ed56a2e6c5343f4e4526cd6d3404e2e41e42564e2c23_amd64 |
| Red Hat | rhacm2/configmap-watcher-rhel8@sha256:8e4eaea9801371aaafa9717b41a4f1ccbde3eaa51c32eb92744f763598b4fc79_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | rhacm2/configmap-watcher-rhel8@sha256:8e4eaea9801371aaafa9717b41a4f1ccbde3eaa51c32eb92744f763598b4fc79_amd64 |
| Red Hat | rhacm2/registration-rhel8-operator@sha256:201f6d4c9c38f3c46281e00ffc4a9936460f9ff040508bcbde6dadbf4ff88644_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | rhacm2/registration-rhel8-operator@sha256:201f6d4c9c38f3c46281e00ffc4a9936460f9ff040508bcbde6dadbf4ff88644_s390x |
| Red Hat | rhacm2/multicloud-manager-rhel8@sha256:9a4efdcd28bbe4e9dedf7a953600b188e468040c67dd9b1b1d91e5bade4f1d8c_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | * |
| Red Hat | rhacm2/mcm-topology-rhel8@sha256:7e432659d224dfdc917bbe8137499218294d461ae02e5ec892a82f4660819e00_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 | rhacm2/mcm-topology-rhel8@sha256:7e432659d224dfdc917bbe8137499218294d461ae02e5ec892a82f4660819e00_amd64 |
…and 57 more
Timeline
- May 4, 2021 CVE Published
- Apr 30, 2026 CVE Updated
- May 1, 2026 Distribution Patch
- May 1, 2026 Distribution Patch
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2021:1499 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1936883 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1939103 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1944286 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1944822 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1944827 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1945459 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1949092 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1949103 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1951384 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1499.json advisory
- https://access.redhat.com/security/cve/CVE-2020-28469 advisory
- https://www.cve.org/CVERecord?id=CVE-2020-28469 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2020-28469 advisory
- https://snyk.io/vuln/SNYK-JS-GLOBPARENT-1016905 advisory
- https://access.redhat.com/security/cve/CVE-2021-23358 advisory
- https://www.cve.org/CVERecord?id=CVE-2021-23358 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2021-23358 advisory
- https://access.redhat.com/security/cve/CVE-2021-28092 advisory
…and 9 more