cockpit-ha-cluster vulnerabilities (AlmaLinux)
7 vulnerabilities.
-
cockpit-ha-clusterAlmaLinux lodash vulnerable to Code Injection via `_.template` imports key names 8.1 High -
cockpit-ha-clusterAlmaLinux Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions 6.9 Medium -
cockpit-ha-clusterAlmaLinux Rack is vulnerable to a memory-exhaustion DoS through unbounded URL-encoded body parsing 7.5 High -
cockpit-ha-clusterAlmaLinux Rack's multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion) 7.5 High -
cockpit-ha-clusterAlmaLinux Rack's multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion) 7.5 High -
cockpit-ha-clusterAlmaLinux Rack's unbounded multipart preamble buffering enables DoS (memory exhaustion) 7.5 High -
cockpit-ha-clusterAlmaLinux Rack QueryParser has an unsafe default allowing params_limit bypass via semicolon-separated parameters 7.5 High