Red Hat Security Advisory

RHSA-2024:6235

Red Hat Trusted Profile Analyzer 1.1.2

Released 2024-09-03 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Trusted Profile Analyzer Operator 1.1 registry.redhat.io/rhtpa/rhtpa-trustification-service-rhel9

TI-2024-26227 CVE-2024-39249 · GHSA-x6xm-h7hm-7p9q

MEDIUM 40

Async <= 2.6.4 and <= 3.2.5 are vulnerable to ReDoS (Regular Expression Denial of Service) while parsing function in autoinject function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00819 Published 2024-07-01 Partial fix CWE-1333