Red Hat Security Advisory

RHSA-2025:14919

Red Hat build of Cryostat 4.0.2: new RHEL 9 container image security update

Released 2025-09-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Cryostat 4 on RHEL 9 cryostat/cryostat-agent-init-rhel9, cryostat/cryostat-db-rhel9, cryostat/cryostat-grafana-dashboard-rhel9 +8

TI-2025-07108 CVE-2025-7783 · GHSA-fjxv-7rqg-78g4

HIGH 76

Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP).

CVSS 4.0CRITICAL 9.4 Network No auth No interaction EPSS 0.0181 Published 2025-07-18 Partial fix · 2.5.4, 3.0.4 +1 CWE-330

TI-2025-34845 CVE-2025-55163 · GHSA-prj3-ccx8-p6x4

MEDIUM 44

Netty is an asynchronous, event-driven network application framework.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.01125 Published 2025-08-13 Partial fix · 4.1.124.Final, 4.2.4.Final +1 CWE-770

TI-2025-07701 CVE-2025-8415 · GHSA-h2p8-37qr-qfr9

LOW 28

A vulnerability was found in the Cryostat HTTP API.

CVSS 3.1MEDIUM 5.9 Network High privileges No interaction EPSS 0.0033 Published 2025-08-20 Partial fix · 4.0.2, 0.5.2-3 +1 CWE-289