VDB
RHSA-2024%3A8581
RHSA-2024%3A8581
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in the Node.js word-wrap module, where it is vulnerable to a denial of service caused by a Regular expression denial of service (ReDoS) issue in the result variable. By sending a specially crafted regex input, a remote attacker can cause a denial of service.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift-gitops-1/argo-rollouts-rhel8@sha256:2923b31fa984b09a7974b409342ff6e14427768414ae2467c04cee209e7afaa8_ppc64le as a component of Red Hat OpenShift GitOps 1.13 | openshift-gitops-1/argo-rollouts-rhel8@sha256:2923b31fa984b09a7974b409342ff6e14427768414ae2467c04cee209e7afaa8_ppc64le, openshift-gitops-1/argo-rollouts-rhel8@sha256:2923b31fa984b09a7974b409342ff6e14427768414ae2467c04cee209e7afaa8_ppc64le, * |
| Red Hat | openshift-gitops-1/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16_arm64 as a component of Red Hat OpenShift GitOps 1.13 | openshift-gitops-1/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16_arm64, openshift-gitops-1/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16_arm64, openshift-gitops-1/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16_arm64 |
| Red Hat | openshift-gitops-1/argocd-rhel8@sha256:e5192c24b2028c3c8f8b947d9b210c16e1325780d601a49c4edd55ef227aa647_arm64 as a component of Red Hat OpenShift GitOps 1.13 | openshift-gitops-1/argocd-rhel8@sha256:e5192c24b2028c3c8f8b947d9b210c16e1325780d601a49c4edd55ef227aa647_arm64, openshift-gitops-1/argocd-rhel8@sha256:e5192c24b2028c3c8f8b947d9b210c16e1325780d601a49c4edd55ef227aa647_arm64, * |
| Red Hat | openshift-gitops-1/argo-rollouts-rhel8@sha256:96e150bfc1fe845c352bbaec4854b4b26e81cde91b7661099a7a39849a40643d_arm64 as a component of Red Hat OpenShift GitOps 1.13 | openshift-gitops-1/argo-rollouts-rhel8@sha256:96e150bfc1fe845c352bbaec4854b4b26e81cde91b7661099a7a39849a40643d_arm64, openshift-gitops-1/argo-rollouts-rhel8@sha256:96e150bfc1fe845c352bbaec4854b4b26e81cde91b7661099a7a39849a40643d_arm64, * |
| Red Hat | openshift-gitops-1/console-plugin-rhel8@sha256:05aedefa7102149096e29848df97f8ff9f68cf7ee4083462082713ab0f9c4483_arm64 as a component of Red Hat OpenShift GitOps 1.13 | openshift-gitops-1/console-plugin-rhel8@sha256:05aedefa7102149096e29848df97f8ff9f68cf7ee4083462082713ab0f9c4483_arm64, *, * |
| Red Hat | openshift-gitops-1/kam-delivery-rhel8@sha256:b3ac4fb0f635c1bc771c659e46e759067f6786694ae156a0afcdb248c4ade316_s390x as a component of Red Hat OpenShift GitOps 1.13 | openshift-gitops-1/kam-delivery-rhel8@sha256:b3ac4fb0f635c1bc771c659e46e759067f6786694ae156a0afcdb248c4ade316_s390x, openshift-gitops-1/kam-delivery-rhel8@sha256:b3ac4fb0f635c1bc771c659e46e759067f6786694ae156a0afcdb248c4ade316_s390x, * |
| Red Hat | openshift-gitops-1/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676_s390x as a component of Red Hat OpenShift GitOps 1.13 | openshift-gitops-1/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676_s390x, openshift-gitops-1/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676_s390x, openshift-gitops-1/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676_s390x |
| Red Hat | openshift-gitops-1/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071_amd64 as a component of Red Hat OpenShift GitOps 1.13 | openshift-gitops-1/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071_amd64, openshift-gitops-1/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071_amd64, openshift-gitops-1/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071_amd64 |
| Red Hat | openshift-gitops-1/must-gather-rhel8@sha256:5362749630f91f87eb3f95b456af1fe692af81a9324fd764c54830b276ee8c89_s390x as a component of Red Hat OpenShift GitOps 1.13 | *, openshift-gitops-1/must-gather-rhel8@sha256:5362749630f91f87eb3f95b456af1fe692af81a9324fd764c54830b276ee8c89_s390x, openshift-gitops-1/must-gather-rhel8@sha256:5362749630f91f87eb3f95b456af1fe692af81a9324fd764c54830b276ee8c89_s390x |
| Red Hat | openshift-gitops-1/gitops-operator-bundle@sha256:0e41fde95f2b68ce8c359e4370accb1f5526382ce415a6b9eba8cdf18e188c94_amd64 as a component of Red Hat OpenShift GitOps 1.13 | openshift-gitops-1/gitops-operator-bundle@sha256:0e41fde95f2b68ce8c359e4370accb1f5526382ce415a6b9eba8cdf18e188c94_amd64, openshift-gitops-1/gitops-operator-bundle@sha256:0e41fde95f2b68ce8c359e4370accb1f5526382ce415a6b9eba8cdf18e188c94_amd64, * |
| Red Hat | openshift-gitops-1/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05_s390x as a component of Red Hat OpenShift GitOps 1.13 | openshift-gitops-1/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05_s390x, openshift-gitops-1/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05_s390x, openshift-gitops-1/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05_s390x |
| Red Hat | openshift-gitops-1/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628_ppc64le as a component of Red Hat OpenShift GitOps 1.13 | openshift-gitops-1/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628_ppc64le, openshift-gitops-1/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628_ppc64le, openshift-gitops-1/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628_ppc64le |
| Red Hat | openshift-gitops-1/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d_ppc64le as a component of Red Hat OpenShift GitOps 1.13 | openshift-gitops-1/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d_ppc64le, openshift-gitops-1/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d_ppc64le, openshift-gitops-1/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d_ppc64le |
| Red Hat | openshift-gitops-1/gitops-rhel8@sha256:02250b997f2778a3dccead719e9a98cddf564bd4fe747d36a185fbc6ca13b947_amd64 as a component of Red Hat OpenShift GitOps 1.13 | *, openshift-gitops-1/gitops-rhel8@sha256:02250b997f2778a3dccead719e9a98cddf564bd4fe747d36a185fbc6ca13b947_amd64, * |
| Red Hat | openshift-gitops-1/must-gather-rhel8@sha256:f59a2c9a8ce1caee8534cbee6bc650df0cfce6a01c134d34c70b95760a84281e_ppc64le as a component of Red Hat OpenShift GitOps 1.13 | openshift-gitops-1/must-gather-rhel8@sha256:f59a2c9a8ce1caee8534cbee6bc650df0cfce6a01c134d34c70b95760a84281e_ppc64le, openshift-gitops-1/must-gather-rhel8@sha256:f59a2c9a8ce1caee8534cbee6bc650df0cfce6a01c134d34c70b95760a84281e_ppc64le, openshift-gitops-1/must-gather-rhel8@sha256:f59a2c9a8ce1caee8534cbee6bc650df0cfce6a01c134d34c70b95760a84281e_ppc64le |
| Red Hat | openshift-gitops-1/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a_s390x as a component of Red Hat OpenShift GitOps 1.13 | openshift-gitops-1/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a_s390x, openshift-gitops-1/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a_s390x, openshift-gitops-1/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a_s390x |
| Red Hat | openshift-gitops-1/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178_amd64 as a component of Red Hat OpenShift GitOps 1.13 | openshift-gitops-1/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178_amd64, openshift-gitops-1/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178_amd64, openshift-gitops-1/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178_amd64 |
| Red Hat | openshift-gitops-1/must-gather-rhel8@sha256:d0efed1bbc4a6349a2b5f9d92d6257aa1b72da62ad2f820a14b6ae1d40c4e1be_amd64 as a component of Red Hat OpenShift GitOps 1.13 | *, openshift-gitops-1/must-gather-rhel8@sha256:d0efed1bbc4a6349a2b5f9d92d6257aa1b72da62ad2f820a14b6ae1d40c4e1be_amd64, openshift-gitops-1/must-gather-rhel8@sha256:d0efed1bbc4a6349a2b5f9d92d6257aa1b72da62ad2f820a14b6ae1d40c4e1be_amd64 |
| Red Hat | openshift-gitops-1/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769_amd64 as a component of Red Hat OpenShift GitOps 1.13 | openshift-gitops-1/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769_amd64, openshift-gitops-1/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769_amd64, openshift-gitops-1/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769_amd64 |
| Red Hat | openshift-gitops-1/gitops-rhel8@sha256:6289e27f28a0a6589d6998c83bf30a5a5c0e4de8c6600b16454acbd4764d90b0_ppc64le as a component of Red Hat OpenShift GitOps 1.13 | openshift-gitops-1/gitops-rhel8@sha256:6289e27f28a0a6589d6998c83bf30a5a5c0e4de8c6600b16454acbd4764d90b0_ppc64le, openshift-gitops-1/gitops-rhel8@sha256:6289e27f28a0a6589d6998c83bf30a5a5c0e4de8c6600b16454acbd4764d90b0_ppc64le, * |
…and 15 more
Timeline
- Oct 29, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 29, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:8581 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://issues.redhat.com/browse/GITOPS-4234 advisory
- https://issues.redhat.com/browse/GITOPS-4358 advisory
- https://issues.redhat.com/browse/GITOPS-5081 advisory
- https://issues.redhat.com/browse/GITOPS-5087 advisory
- https://issues.redhat.com/browse/GITOPS-5640 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8581.json advisory
- https://access.redhat.com/security/cve/CVE-2023-26115 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2216827 issue
- https://www.cve.org/CVERecord?id=CVE-2023-26115 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-26115 advisory
- https://access.redhat.com/security/cve/CVE-2024-43796 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2311152 issue
- https://www.cve.org/CVERecord?id=CVE-2024-43796 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-43796 advisory
- https://github.com/expressjs/express/commit/54271f69b511fea198471e6ff3400ab805d6b553 advisory
- https://github.com/expressjs/express/security/advisories/GHSA-qw6h-vgh9-j6wx advisory
- https://access.redhat.com/security/cve/CVE-2024-43799 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2311153 issue
…and 24 more