Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat Openshift | — | Upgrade nodejs-bracesUpgrade nodejs-lodash.defaultsUpgrade nodejs-iniUpgrade jenkinsUpgrade nodejs-end-of-streamUpgrade nodejs-deep-extendUpgrade nodejs-is-numberUpgrade nodejs-create-error-classUpgrade nodejs-is-streamUpgrade nodejs-pinkie-promiseUpgrade nodejs-url-parse-laxUpgrade nodejs-pause-streamUpgrade nodejs-string-lengthUpgrade nodejs-is-redirectUpgrade nodejs-lodash.getnativeUpgrade nodejs-readdirpUpgrade origin-kibanaUpgrade nodejs-undefsafeUpgrade nodejs-lodash.isiterateecallUpgrade nodejs-binary-extensionsUpgrade nodejs-prepend-httpUpgrade nodejs-fill-rangeUpgrade openshiftUpgrade nodejs-touchUpgrade nodejs-read-all-streamUpgrade nodejs-throughUpgrade heapsterUpgrade nodejs-is-dotfileUpgrade nodejs-configstoreUpgrade nodejs-anymatchUpgrade nodejs-graceful-fsUpgrade nodejs-unzip-responseUpgrade nodejs-normalize-pathUpgrade nodejs-lodash.keysUpgrade nodejs-for-ownUpgrade nodejs-duplexifyUpgrade openshift-ansibleUpgrade nodejs-repeat-elementUpgrade nodejs-glob-baseUpgrade nodejs-ansi-wrapUpgrade nodejs-arr-diffUpgrade nodejs-registry-urlUpgrade nodejs-lodash.basecopyUpgrade nodejs-lodash.isarrayUpgrade nodejs-is-binary-pathUpgrade nodejs-expand-rangeUpgrade nodejs-pinkieUpgrade nodejs-kind-ofUpgrade nodejs-splitUpgrade nodejs-slideUpgrade nodejs-uuidUpgrade nodejs-update-notifierUpgrade nodejs-gotUpgrade nodejs-extglobUpgrade nodejs-package-jsonUpgrade nodejs-lazy-cacheUpgrade nodejs-arr-flattenUpgrade nss_wrapperUpgrade nodejs-is-equal-shallowUpgrade nodejs-strip-json-commentsUpgrade nodejs-async-eachUpgrade nodejs-chokidarUpgrade nodejs-arrifyUpgrade nodejs-nodemonUpgrade nodejs-lodash.restparamUpgrade nodejs-randomaticUpgrade nodejs-is-extendableUpgrade nodejs-regex-cacheUpgrade nodejs-success-symbolUpgrade nodejs-array-uniqueUpgrade nodejs-is-extglobUpgrade nodejs-lodash.bindcallbackUpgrade nodejs-mkdirpUpgrade nodejs-preserveUpgrade nodejs-ps-treeUpgrade nodejs-parse-globUpgrade atomic-openshiftUpgrade nodejs-lodash.assignUpgrade nodejs-duplexerUpgrade nodejs-for-inUpgrade nodejs-fromUpgrade nodejs-lodash.createassignerUpgrade nodejs-isobjectUpgrade nodejs-osenvUpgrade nodejs-micromatchUpgrade nodejs-rcUpgrade nodejs-lodash.isargumentsUpgrade nodejs-is-npmUpgrade nodejs-object-assignUpgrade nodejs-map-streamUpgrade nodejs-filename-regexUpgrade nodejs-align-textUpgrade nodejs-lodash.baseassignUpgrade openvswitchUpgrade nodejs-is-primitiveUpgrade nodejs-node-status-codesUpgrade nodejs-ansi-greenUpgrade nodejs-es6-promiseUpgrade nodejs-semverUpgrade nodejs-error-exUpgrade nodejs-os-tmpdirUpgrade nodejs-latest-versionUpgrade nodejs-stream-combinerUpgrade nodejs-glob-parentUpgrade nodejs-capture-stack-traceUpgrade nodejs-xdg-basedirUpgrade nodejs-timed-outUpgrade nodejs-object.omitUpgrade nodejs-lowercase-keysUpgrade nodejs-write-file-atomicUpgrade nodejs-semver-diffUpgrade nodejs-is-globUpgrade nodejs-os-homedirUpgrade nodejs-parse-jsonUpgrade nodejs-is-plain-objUpgrade nodejs-event-streamUpgrade nodejs-optimistUpgrade nodejs-expand-brackets | Jun 18, 2018 | Jan 6, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 6, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub