title: Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.6.2
description: curl: libcurl: ASN.1 date parser overread webpack: DOM Clobbering vulnerability in AutoPublicPathRuntimeModule express: Improper Input Handling in Express Redirects send: Code Execution Vulnerability in Send Library serve-static: Improper Sanitization in serve-static path-to-regexp: Backtracking regular expressions cause ReDoS body-parser: Denial of Service Vulnerability in body-parser envoy: Potential to manipulate `x-envoy` headers from external sources envoy: Malicious log injection via access logs envoy: Envoy crashes for `LocalReply` in HTTP async client
cpes: cpe:/a:redhat:service_mesh:2.6::el8 cpe:/a:redhat:service_mesh:2.6::el9