sprintf-js through 1.1.3 Denial of Service via Unbounded Precision
Published Sep 24, 2026
6.9
MEDIUMCVSS 4.0
EPSS 0.37%
Description
sprintf-js through 1.1.3 passes unbounded precision specifiers to toFixed, toExponential, and toPrecision methods without validation, causing uncaught RangeError exceptions. Attackers who control format strings can inject precision values exceeding ECMAScript limits to abort calling operations with minimal payload.
Affected products
-
- Version 0StatusaffectedConstraints<=1.1.3
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Alexei | Sprintf-JS | unaffected |
|
No data.
No data.
Gatekeeper 3
gatekeeper/gatekeeper-rhel9
Fix deferred
Migration Toolkit for Applications 8
mta/mta-cli-rhel9
Fix deferred
Migration Toolkit for Applications 8
mta/mta-generic-external-provider-rhel9
Fix deferred
Multicluster Engine for Kubernetes
multicluster-engine/console-mce-rhel9
Fix deferred
Node HealthCheck Operator
workload-availability/node-healthcheck-must-gather-rhel9
Fix deferred
Node HealthCheck Operator
workload-availability/node-healthcheck-operator-bundle
Fix deferred
Node HealthCheck Operator
workload-availability/node-healthcheck-rhel9-operator
Fix deferred
Node HealthCheck Operator
workload-availability/node-remediation-console-rhel8
Fix deferred
Node HealthCheck Operator
workload-availability/node-remediation-console-rhel9
Fix deferred
OpenShift Pipelines
openshift-pipelines/pipelines-hub-ui-rhel8
Fix deferred
OpenShift Pipelines
openshift-pipelines/pipelines-hub-ui-rhel9
Fix deferred
OpenShift Service Mesh 3
openshift-service-mesh/kiali-operator-bundle
Fix deferred
OpenShift Service Mesh 3
openshift-service-mesh/kiali-rhel9-operator
Fix deferred
Red Hat 3scale API Management Platform 2
3scale-amp2/system-rhel8
Fix deferred
Red Hat AMQ Broker 7
amq-broker-bin.zip
Fix deferred
Red Hat AMQ Broker 7
amq-broker-maven-repository.zip
Fix deferred
Red Hat Advanced Cluster Management for Kubernetes 2
rhacm2/console-rhel9
Fix deferred
Red Hat Ansible Automation Platform 2
automation-controller
Fix deferred
Red Hat Ansible Automation Platform 2
automation-eda-controller
Fix deferred
Red Hat Ansible Automation Platform 2
automation-gateway
Fix deferred
Red Hat Ansible Automation Platform 2
automation-platform-ui
Fix deferred
Red Hat Build of Keycloak
keycloak-operator.redhat-00001.zip
Fix deferred
Red Hat Build of Keycloak
keycloak-operator.redhat-00003.zip
Fix deferred
Red Hat Build of Keycloak
rhbk-quarkus-dist.zip
Fix deferred
Red Hat Build of Podman Desktop
rh-podman-desktop
Fix deferred
Red Hat Ceph Storage 9
libarrow
Fix deferred
Red Hat Connectivity Link 1
rhcl-1/rhcl-console-plugin-rhel9
Fix deferred
Red Hat Data Grid 8
redhat-datagrid-maven-repository.zip
Fix deferred
Red Hat Developer Hub
rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend
Fix deferred
Red Hat Developer Hub
rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend
Fix deferred
Red Hat Developer Hub
rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki
Fix deferred
Red Hat Developer Hub
rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator
Fix deferred
Red Hat Developer Hub
rhdh/rhdh-hub-rhel9
Fix deferred
Red Hat Directory Server 11
redhat-ds:11/389-ds-base
Fix deferred
Red Hat Directory Server 12
redhat-ds:12/389-ds-base
Fix deferred
Red Hat Directory Server 13
389-ds-base
Fix deferred
Red Hat Enterprise Linux 10
389-ds-base
Fix deferred
Red Hat Enterprise Linux 10
cockpit
Fix deferred
Red Hat Enterprise Linux 10
dotnet8.0
Fix deferred
Red Hat Enterprise Linux 10
firefox
Fix deferred
Red Hat Enterprise Linux 10
grafana
Fix deferred
Red Hat Enterprise Linux 10
grafana-pcp
Fix deferred
Red Hat Enterprise Linux 10
linux-sgx
Fix deferred
Red Hat Enterprise Linux 10
thunderbird
Fix deferred
Red Hat Enterprise Linux 7
subscription-manager
Fix deferred
Red Hat Enterprise Linux 8
389-ds:1.4/389-ds-base
Fix deferred
Red Hat Enterprise Linux 8
cockpit
Fix deferred
Red Hat Enterprise Linux 8
cockpit-appstream
Fix deferred
Red Hat Enterprise Linux 8
dotnet8.0
Fix deferred
Red Hat Enterprise Linux 8
grafana
Fix deferred
Red Hat Enterprise Linux 8
grafana-pcp
Fix deferred
Red Hat Enterprise Linux 8
mozjs60
Fix deferred
Red Hat Enterprise Linux 8
pcs
Fix deferred
Red Hat Enterprise Linux 8
rhel8/s2i-base
Fix deferred
Red Hat Enterprise Linux 8
thunderbird
Fix deferred
Red Hat Enterprise Linux 9
389-ds-base
Fix deferred
Red Hat Enterprise Linux 9
cockpit
Fix deferred
Red Hat Enterprise Linux 9
dotnet8.0
Fix deferred
Red Hat Enterprise Linux 9
firefox
Fix deferred
Red Hat Enterprise Linux 9
gjs
Fix deferred
Red Hat Enterprise Linux 9
grafana
Fix deferred
Red Hat Enterprise Linux 9
grafana-pcp
Fix deferred
Red Hat Enterprise Linux 9
linux-sgx
Fix deferred
Red Hat Enterprise Linux 9
pcs
Fix deferred
Red Hat Enterprise Linux 9
thunderbird
Fix deferred
Red Hat Enterprise Linux AI (RHEL AI) 3
rhelai3/bootc-cuda-rhel9
Fix deferred
Red Hat Enterprise Linux AI (RHEL AI) 3
rhelai3/bootc-gaudi-rhel9
Fix deferred
Red Hat Enterprise Linux AI (RHEL AI) 3
rhelai3/bootc-rocm-rhel9
Fix deferred
Red Hat Enterprise Linux AI (RHEL AI) 3
rhelai3/disk-image-cuda-rhel9
Fix deferred
Red Hat Fuse 7
sprintf-js
Fix deferred
Red Hat Hardened Images
dotnet8.0
Not affected
Red Hat Hardened Images
grafana12.4
Not affected
Red Hat Hardened Images
grafana13.1
Not affected
Red Hat Hardened Images
grafana13.2
Not affected
Red Hat Hardened Images
jaeger
Not affected
Red Hat Hardened Images
opentelemetry-collector
Not affected
Red Hat Hardened Images
opentelemetry-collector-contrib
Not affected
Red Hat Hardened Images
opentelemetry-collector-k8s
Not affected
Red Hat Hardened Images
prometheus3.13
Not affected
Red Hat JBoss Enterprise Application Platform 7
jboss-eap-full-maven-repository.zip
Fix deferred
Red Hat JBoss Enterprise Application Platform 7
jboss-eap-incremental-maven-repository.zip
Fix deferred
Red Hat JBoss Enterprise Application Platform 7
jboss-eap-maven-repository.zip
Fix deferred
Red Hat JBoss Enterprise Application Platform 7
jboss-eap-patch.zip
Fix deferred
Red Hat JBoss Enterprise Application Platform 7
jboss-eap-runtime-maven-repository.zip
Fix deferred
Red Hat JBoss Enterprise Application Platform 8
jboss-eap-runtime-maven-repository.zip
Fix deferred
Red Hat JBoss Enterprise Application Platform 8
jboss-eap.1-runtime-maven-repository.zip
Fix deferred
Red Hat JBoss Enterprise Application Platform Expansion Pack
jboss-eap-runtime-maven-repository.zip
Fix deferred
Red Hat JBoss Enterprise Application Platform Expansion Pack
jboss-eap.1-runtime-maven-repository.zip
Fix deferred
Red Hat OpenShift AI (RHOAI)
rhoai/odh-core-bff-rhel9
Fix deferred
Red Hat OpenShift AI (RHOAI)
rhoai/odh-dashboard-operator-rhel9
Fix deferred
Red Hat OpenShift AI (RHOAI)
rhoai/odh-dashboard-rhel9
Fix deferred
Red Hat OpenShift AI (RHOAI)
rhoai/odh-feature-server-rhel9
Fix deferred
Red Hat OpenShift AI (RHOAI)
rhoai/odh-mlflow-rhel9
Fix deferred
Red Hat OpenShift AI (RHOAI)
rhoai/odh-mod-arch-agent-ops-rhel9
Fix deferred
Red Hat OpenShift AI (RHOAI)
rhoai/odh-mod-arch-automl-rhel9
Fix deferred
Red Hat OpenShift AI (RHOAI)
rhoai/odh-mod-arch-autorag-rhel9
Fix deferred
Red Hat OpenShift AI (RHOAI)
rhoai/odh-mod-arch-eval-hub-rhel9
Fix deferred
Red Hat OpenShift AI (RHOAI)
rhoai/odh-mod-arch-gen-ai-rhel9
Fix deferred
Red Hat OpenShift AI (RHOAI)
rhoai/odh-mod-arch-maas-rhel9
Fix deferred
Red Hat OpenShift AI (RHOAI)
rhoai/odh-mod-arch-mlflow-rhel9
Fix deferred
Red Hat OpenShift AI (RHOAI)
rhoai/odh-mod-arch-model-registry-rhel9
Fix deferred
Red Hat OpenShift AI (RHOAI)
rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9
Fix deferred
Red Hat OpenShift Container Platform 4
openshift4/ose-console
Fix deferred
Red Hat OpenShift Container Platform 4
openshift4/ose-console-rhel9
Fix deferred
Red Hat OpenShift Container Platform 4
openshift4/ose-monitoring-plugin-rhel8
Fix deferred
Red Hat OpenShift Container Platform 4
openshift4/ose-monitoring-plugin-rhel9
Fix deferred
Red Hat OpenShift Dev Spaces
devspaces/code-rhel9
Fix deferred
Red Hat OpenShift Dev Spaces
devspaces/dashboard-rhel9
Fix deferred
Red Hat OpenShift Dev Spaces
devspaces/openvsx-rhel9
Fix deferred
Red Hat OpenShift GitOps
microshift-gitops
Fix deferred
Red Hat OpenShift GitOps
openshift-gitops-argocd-cli
Fix deferred
Red Hat Openshift Data Foundation 4
odf4/ocs-client-console-rhel9
Fix deferred
Red Hat Openshift Data Foundation 4
odf4/odf-console-rhel9
Fix deferred
Red Hat Openshift Data Foundation 4
odf4/odf-multicluster-console-rhel9
Fix deferred
Red Hat Openshift Data Foundation 4
rhceph-dev/odf4-mcg-core-rhel9
Fix deferred
Red Hat Openshift Data Foundation 4
rhceph-dev/odf4-ocs-client-console-rhel9
Fix deferred
Red Hat Openshift Data Foundation 4
rhceph-dev/odf4-odf-console-rhel9
Fix deferred
Red Hat Openshift Data Foundation 4
rhceph-dev/odf4-odf-multicluster-console-rhel9
Fix deferred
Red Hat Quay 3
quay/quay-rhel8
Fix deferred
Red Hat Quay 3
quay/quay-rhel9
Fix deferred
Red Hat Single Sign-On 7
rh-sso-server-dist.zip
Fix deferred
Red Hat build of Apache Camel - HawtIO 4
rhaf-hawtio-maven-repository.zip
Fix deferred
Red Hat build of Apache Camel for Spring Boot 4
rhaf-camel-for-springboot-maven-repository.zip
Fix deferred
Red Hat build of Apache Camel for Spring Boot 4
rhaf-camel-maven-repository.zip
Fix deferred
Red Hat build of Apache Camel for Spring Boot 4
rhaf-camel-spring-boot-maven-repository.zip
Fix deferred
Secrets Management Console for Red Hat OpenShift
external-secrets-management/console-plugin-rhel9
Fix deferred
Self-service automation portal 2
ansible-automation-platform/automation-portal
Fix deferred
Self-service automation portal 2
ansible-automation-platform/bootc-automation-portal-rhel9
Fix deferred
| Product | Package | State | Advisory |
|---|---|---|---|
| Gatekeeper 3 | gatekeeper/gatekeeper-rhel9 | Fix deferred | n/a |
| Migration Toolkit for Applications 8 | mta/mta-cli-rhel9 | Fix deferred | n/a |
| Migration Toolkit for Applications 8 | mta/mta-generic-external-provider-rhel9 | Fix deferred | n/a |
| Multicluster Engine for Kubernetes | multicluster-engine/console-mce-rhel9 | Fix deferred | n/a |
| Node HealthCheck Operator | workload-availability/node-healthcheck-must-gather-rhel9 | Fix deferred | n/a |
| Node HealthCheck Operator | workload-availability/node-healthcheck-operator-bundle | Fix deferred | n/a |
| Node HealthCheck Operator | workload-availability/node-healthcheck-rhel9-operator | Fix deferred | n/a |
| Node HealthCheck Operator | workload-availability/node-remediation-console-rhel8 | Fix deferred | n/a |
| Node HealthCheck Operator | workload-availability/node-remediation-console-rhel9 | Fix deferred | n/a |
| OpenShift Pipelines | openshift-pipelines/pipelines-hub-ui-rhel8 | Fix deferred | n/a |
| OpenShift Pipelines | openshift-pipelines/pipelines-hub-ui-rhel9 | Fix deferred | n/a |
| OpenShift Service Mesh 3 | openshift-service-mesh/kiali-operator-bundle | Fix deferred | n/a |
| OpenShift Service Mesh 3 | openshift-service-mesh/kiali-rhel9-operator | Fix deferred | n/a |
| Red Hat 3scale API Management Platform 2 | 3scale-amp2/system-rhel8 | Fix deferred | n/a |
| Red Hat AMQ Broker 7 | amq-broker-bin.zip | Fix deferred | n/a |
| Red Hat AMQ Broker 7 | amq-broker-maven-repository.zip | Fix deferred | n/a |
| Red Hat Advanced Cluster Management for Kubernetes 2 | rhacm2/console-rhel9 | Fix deferred | n/a |
| Red Hat Ansible Automation Platform 2 | automation-controller | Fix deferred | n/a |
| Red Hat Ansible Automation Platform 2 | automation-eda-controller | Fix deferred | n/a |
| Red Hat Ansible Automation Platform 2 | automation-gateway | Fix deferred | n/a |
| Red Hat Ansible Automation Platform 2 | automation-platform-ui | Fix deferred | n/a |
| Red Hat Build of Keycloak | keycloak-operator.redhat-00001.zip | Fix deferred | n/a |
| Red Hat Build of Keycloak | keycloak-operator.redhat-00003.zip | Fix deferred | n/a |
| Red Hat Build of Keycloak | rhbk-quarkus-dist.zip | Fix deferred | n/a |
| Red Hat Build of Podman Desktop | rh-podman-desktop | Fix deferred | n/a |
| Red Hat Ceph Storage 9 | libarrow | Fix deferred | n/a |
| Red Hat Connectivity Link 1 | rhcl-1/rhcl-console-plugin-rhel9 | Fix deferred | n/a |
| Red Hat Data Grid 8 | redhat-datagrid-maven-repository.zip | Fix deferred | n/a |
| Red Hat Developer Hub | rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend | Fix deferred | n/a |
| Red Hat Developer Hub | rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend | Fix deferred | n/a |
| Red Hat Developer Hub | rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki | Fix deferred | n/a |
| Red Hat Developer Hub | rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator | Fix deferred | n/a |
| Red Hat Developer Hub | rhdh/rhdh-hub-rhel9 | Fix deferred | n/a |
| Red Hat Directory Server 11 | redhat-ds:11/389-ds-base | Fix deferred | n/a |
| Red Hat Directory Server 12 | redhat-ds:12/389-ds-base | Fix deferred | n/a |
| Red Hat Directory Server 13 | 389-ds-base | Fix deferred | n/a |
| Red Hat Enterprise Linux 10 | 389-ds-base | Fix deferred | n/a |
| Red Hat Enterprise Linux 10 | cockpit | Fix deferred | n/a |
| Red Hat Enterprise Linux 10 | dotnet8.0 | Fix deferred | n/a |
| Red Hat Enterprise Linux 10 | firefox | Fix deferred | n/a |
| Red Hat Enterprise Linux 10 | grafana | Fix deferred | n/a |
| Red Hat Enterprise Linux 10 | grafana-pcp | Fix deferred | n/a |
| Red Hat Enterprise Linux 10 | linux-sgx | Fix deferred | n/a |
| Red Hat Enterprise Linux 10 | thunderbird | Fix deferred | n/a |
| Red Hat Enterprise Linux 7 | subscription-manager | Fix deferred | n/a |
| Red Hat Enterprise Linux 8 | 389-ds:1.4/389-ds-base | Fix deferred | n/a |
| Red Hat Enterprise Linux 8 | cockpit | Fix deferred | n/a |
| Red Hat Enterprise Linux 8 | cockpit-appstream | Fix deferred | n/a |
| Red Hat Enterprise Linux 8 | dotnet8.0 | Fix deferred | n/a |
| Red Hat Enterprise Linux 8 | grafana | Fix deferred | n/a |
| Red Hat Enterprise Linux 8 | grafana-pcp | Fix deferred | n/a |
| Red Hat Enterprise Linux 8 | mozjs60 | Fix deferred | n/a |
| Red Hat Enterprise Linux 8 | pcs | Fix deferred | n/a |
| Red Hat Enterprise Linux 8 | rhel8/s2i-base | Fix deferred | n/a |
| Red Hat Enterprise Linux 8 | thunderbird | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | 389-ds-base | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | cockpit | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | dotnet8.0 | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | firefox | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | gjs | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | grafana | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | grafana-pcp | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | linux-sgx | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | pcs | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | thunderbird | Fix deferred | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | rhelai3/bootc-cuda-rhel9 | Fix deferred | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | rhelai3/bootc-gaudi-rhel9 | Fix deferred | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | rhelai3/bootc-rocm-rhel9 | Fix deferred | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | rhelai3/disk-image-cuda-rhel9 | Fix deferred | n/a |
| Red Hat Fuse 7 | sprintf-js | Fix deferred | n/a |
| Red Hat Hardened Images | dotnet8.0 | Not affected | n/a |
| Red Hat Hardened Images | grafana12.4 | Not affected | n/a |
| Red Hat Hardened Images | grafana13.1 | Not affected | n/a |
| Red Hat Hardened Images | grafana13.2 | Not affected | n/a |
| Red Hat Hardened Images | jaeger | Not affected | n/a |
| Red Hat Hardened Images | opentelemetry-collector | Not affected | n/a |
| Red Hat Hardened Images | opentelemetry-collector-contrib | Not affected | n/a |
| Red Hat Hardened Images | opentelemetry-collector-k8s | Not affected | n/a |
| Red Hat Hardened Images | prometheus3.13 | Not affected | n/a |
| Red Hat JBoss Enterprise Application Platform 7 | jboss-eap-full-maven-repository.zip | Fix deferred | n/a |
| Red Hat JBoss Enterprise Application Platform 7 | jboss-eap-incremental-maven-repository.zip | Fix deferred | n/a |
| Red Hat JBoss Enterprise Application Platform 7 | jboss-eap-maven-repository.zip | Fix deferred | n/a |
| Red Hat JBoss Enterprise Application Platform 7 | jboss-eap-patch.zip | Fix deferred | n/a |
| Red Hat JBoss Enterprise Application Platform 7 | jboss-eap-runtime-maven-repository.zip | Fix deferred | n/a |
| Red Hat JBoss Enterprise Application Platform 8 | jboss-eap-runtime-maven-repository.zip | Fix deferred | n/a |
| Red Hat JBoss Enterprise Application Platform 8 | jboss-eap.1-runtime-maven-repository.zip | Fix deferred | n/a |
| Red Hat JBoss Enterprise Application Platform Expansion Pack | jboss-eap-runtime-maven-repository.zip | Fix deferred | n/a |
| Red Hat JBoss Enterprise Application Platform Expansion Pack | jboss-eap.1-runtime-maven-repository.zip | Fix deferred | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-core-bff-rhel9 | Fix deferred | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-dashboard-operator-rhel9 | Fix deferred | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-dashboard-rhel9 | Fix deferred | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-feature-server-rhel9 | Fix deferred | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-mlflow-rhel9 | Fix deferred | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-mod-arch-agent-ops-rhel9 | Fix deferred | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-mod-arch-automl-rhel9 | Fix deferred | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-mod-arch-autorag-rhel9 | Fix deferred | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-mod-arch-eval-hub-rhel9 | Fix deferred | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-mod-arch-gen-ai-rhel9 | Fix deferred | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-mod-arch-maas-rhel9 | Fix deferred | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-mod-arch-mlflow-rhel9 | Fix deferred | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-mod-arch-model-registry-rhel9 | Fix deferred | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9 | Fix deferred | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-console | Fix deferred | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-console-rhel9 | Fix deferred | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-monitoring-plugin-rhel8 | Fix deferred | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-monitoring-plugin-rhel9 | Fix deferred | n/a |
| Red Hat OpenShift Dev Spaces | devspaces/code-rhel9 | Fix deferred | n/a |
| Red Hat OpenShift Dev Spaces | devspaces/dashboard-rhel9 | Fix deferred | n/a |
| Red Hat OpenShift Dev Spaces | devspaces/openvsx-rhel9 | Fix deferred | n/a |
| Red Hat OpenShift GitOps | microshift-gitops | Fix deferred | n/a |
| Red Hat OpenShift GitOps | openshift-gitops-argocd-cli | Fix deferred | n/a |
| Red Hat Openshift Data Foundation 4 | odf4/ocs-client-console-rhel9 | Fix deferred | n/a |
| Red Hat Openshift Data Foundation 4 | odf4/odf-console-rhel9 | Fix deferred | n/a |
| Red Hat Openshift Data Foundation 4 | odf4/odf-multicluster-console-rhel9 | Fix deferred | n/a |
| Red Hat Openshift Data Foundation 4 | rhceph-dev/odf4-mcg-core-rhel9 | Fix deferred | n/a |
| Red Hat Openshift Data Foundation 4 | rhceph-dev/odf4-ocs-client-console-rhel9 | Fix deferred | n/a |
| Red Hat Openshift Data Foundation 4 | rhceph-dev/odf4-odf-console-rhel9 | Fix deferred | n/a |
| Red Hat Openshift Data Foundation 4 | rhceph-dev/odf4-odf-multicluster-console-rhel9 | Fix deferred | n/a |
| Red Hat Quay 3 | quay/quay-rhel8 | Fix deferred | n/a |
| Red Hat Quay 3 | quay/quay-rhel9 | Fix deferred | n/a |
| Red Hat Single Sign-On 7 | rh-sso-server-dist.zip | Fix deferred | n/a |
| Red Hat build of Apache Camel - HawtIO 4 | rhaf-hawtio-maven-repository.zip | Fix deferred | n/a |
| Red Hat build of Apache Camel for Spring Boot 4 | rhaf-camel-for-springboot-maven-repository.zip | Fix deferred | n/a |
| Red Hat build of Apache Camel for Spring Boot 4 | rhaf-camel-maven-repository.zip | Fix deferred | n/a |
| Red Hat build of Apache Camel for Spring Boot 4 | rhaf-camel-spring-boot-maven-repository.zip | Fix deferred | n/a |
| Secrets Management Console for Red Hat OpenShift | external-secrets-management/console-plugin-rhel9 | Fix deferred | n/a |
| Self-service automation portal 2 | ansible-automation-platform/automation-portal | Fix deferred | n/a |
| Self-service automation portal 2 | ansible-automation-platform/bootc-automation-portal-rhel9 | Fix deferred | n/a |
sprintf-js
npm
Introduced 0 Fixed not fixed
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | sprintf-js | 0 | not fixed |
Remediation
No remediation recorded yet.
References (11)
- https://access.redhat.com/security/cve/CVE-2026-97058 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2540091 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-85884 Advisory
- https://github.com/advisories/GHSA-hp3w-g68c-fv3c Advisory
- https://github.com/alexei/sprintf.js product
- https://github.com/alexei/sprintf.js/blob/3a0d8c26d291b5bd9f1974877ecc50739921d6f5/src/sprintf.js#L17 technical-description
- https://github.com/alexei/sprintf.js/blob/3a0d8c26d291b5bd9f1974877ecc50739921d6f5/src/sprintf.js#L84-L90 technical-description
- https://github.com/alexei/sprintf.js/issues/237 exploitissue-tracking
- https://nvd.nist.gov/vuln/detail/CVE-2026-97058
- https://www.cve.org/CVERecord?id=CVE-2026-97058
- https://www.vulncheck.com/advisories/sprintf-js-through-1.1.3-denial-of-service-via-unbounded-precision third-party-advisory
Change history (0)
No recorded changes yet.