Red Hat Security Advisory

RHSA-2025:14474

RHTAS 1.2.1- Red Hat Trusted Artifact Signer Release

Released 2025-08-25 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Trusted Artifact Signer 1.2 registry.redhat.io/rhtas/rekor-search-ui-rhel9

TI-2025-08513 CVE-2025-9288 · GHSA-95m3-7q98-8xr5

HIGH 72

Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.This issue affects sha.js: through 2.4.11.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00738 Published 2025-08-20 Partial fix · 2.4.12 CWE-20

TI-2025-05947 CVE-2025-6547 · GHSA-v62p-rq8g-8h59

HIGH 72

Improper Input Validation vulnerability in pbkdf2 allows Signature Spoofing by Improper Validation.This issue affects pbkdf2: <=3.1.2.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00463 Published 2025-06-23 Partial fix · 3.1.3 CWE-20

TI-2025-05945 CVE-2025-6545 · GHSA-h7cp-r72f-jxh6

HIGH 72

Improper Input Validation vulnerability in pbkdf2 allows Signature Spoofing by Improper Validation.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00447 Published 2025-06-23 Partial fix · 3.1.3 CWE-20