TI-2025-07108 CVE-2025-7783 · GHSA-fjxv-7rqg-78g4
Usage of unsafe random function in form-data for choosing boundary
Priority HIGH 76
Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP).
RHSA-2025:19332
multicluster engine for Kubernetes 2.9.1 security update
Released 2025-10-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- multicluster engine for Kubernetes 2.9 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9 +7
Fixes 5 records
TI-2025-08513 CVE-2025-9288 · GHSA-95m3-7q98-8xr5
Missing type checks leading to hash rewind and passing on crafted data
Priority HIGH 72
Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.This issue affects sha.js: through 2.4.11.
TI-2025-08512 CVE-2025-9287 · GHSA-cpq7-6gpm-g9rc
Missing type checks leading to hash rewind and passing on crafted data
Priority HIGH 72
Improper Input Validation vulnerability in cipher-base allows Input Data Manipulation.This issue affects cipher-base: through 1.0.4.
TI-2025-30311 CVE-2025-47907 · GHSA-j5pm-7495-qmr3
Incorrect results returned from Rows.Scan in database/sql
Priority LOW 31
Cancelling a query (e.g.
TI-2025-06557 CVE-2025-7195 · GHSA-856v-8qm2-9wjv
Operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd
Priority LOW 28
Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID.