Red Hat Red Hat Ceph Storage 8.1 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Red Hat Red Hat Ceph Storage 8.1: 2 record(s), with affected versions and fixes.
CVE-2025-13033
High · 7.5
CWE-1286 Nov 14, 2025
Nodemailer: nodemailer: email to an unintended domain can occur due to interpretation conflict
A vulnerability was identified in the email parsing library due to improper handling of specially formatted recipient email addresses. An attacker can exploit this flaw by crafting a recipient address that embeds an external address within quotes. This causes the application to misdirect the email to the attacker's external address instead of the intended internal recipient. This could lead to a significant data leak of sensitive information and allow an attacker to bypass security filters and access controls.
CVE-2024-11831
Medium · 5.4
CWE-79 Feb 10, 2025
Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript
A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject malicious code. This code could be executed when deserialized by a web browser, causing Cross-site scripting (XSS) attacks. This issue is critical in environments where serialized data is sent to web clients, potentially compromising the security of the website or web application using this package.