Red Hat Security Advisory

RHSA-2025:1842

RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release

Released 2025-02-25 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Trusted Artifact Signer 1.1 registry.redhat.io/rhtas/rekor-search-ui-rhel9

Fixes 1 record

TI-2024-14294 CVE-2024-21538 · GHSA-3xgq-45jj-v275

Regular expression denial of service in cross-spawn

HIGH 77

Versions of the package cross-spawn before 6.0.6, from 7.0.0 and before 7.0.5 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper input sanitization.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00868 Published 2024-11-08 Partial fix · 6.0.6, 7.0.5 +1 CWE-1333