title: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.3.11 security updates and bug fixes
description: node-fetch: exposure of sensitive information to an unauthorized actor follow-redirects: Exposure of Sensitive Information via Authorization Header leak nconf: Prototype pollution in memory store golang: crypto/elliptic: IsOnCurve returns true for invalid field elements Moment.js: Path traversal  in moment.locale golang: syscall: faccessat checks wrong group go-getter: writes SSH credentials into logfile, exposing sensitive credentials to local uses
cpes: cpe:/a:redhat:acm:2.3::el7 cpe:/a:redhat:acm:2.3::el8