Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.17.0 release

CVE-2023-42282 — nodejs-ip: arbitrary code execution via the isPublic() function CVE-2024-21534 — jsonpath-plus: Remote Code Execution in jsonpath-plus via Improper Input Sanitization CVE-2024-29415 — node-ip: Incomplete fix for CVE-2023-42282 CVE-2024-34155 — go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion CVE-2024-34156 — encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion CVE-2024-45296 — path-to-regexp: Backtracking regular expressions cause ReDoS CVE-2024-45813 — find-my-way: ReDoS vulnerability in multiparametric routes CVE-2024-47875 — dompurify: nesting-based mutation XSS vulnerability CVE-2024-48949 — elliptic: Missing Validation in Elliptic's EDDSA Signature Verification