TI-2025-07108 CVE-2025-7783 · GHSA-fjxv-7rqg-78g4
Usage of unsafe random function in form-data for choosing boundary
Priority HIGH 76
Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP).
RHSA-2025:19335
Red Hat Advanced Cluster Management for Kubernetes 2.14.1 security update
Released 2025-10-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Advanced Cluster Management for Kubernetes 2.14 registry.redhat.io/rhacm2/acm-cluster-permission-rhel9, registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9 +9
Fixes 7 records
TI-2025-36412 CVE-2025-58754 · GHSA-4hjh-wcwx-xvwj
Axios is vulnerable to DoS attack through lack of data size check
Priority HIGH 72
Axios is a promise based HTTP client for the browser and Node.js.
TI-2025-08513 CVE-2025-9288 · GHSA-95m3-7q98-8xr5
Missing type checks leading to hash rewind and passing on crafted data
Priority HIGH 72
Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.This issue affects sha.js: through 2.4.11.
TI-2025-08512 CVE-2025-9287 · GHSA-cpq7-6gpm-g9rc
Missing type checks leading to hash rewind and passing on crafted data
Priority HIGH 72
Improper Input Validation vulnerability in cipher-base allows Input Data Manipulation.This issue affects cipher-base: through 1.0.4.
TI-2025-33491 CVE-2025-53547 · GHSA-557j-xg8c-q2mm
Helm Chart Dependency Updating With Malicious Chart.yaml Content And Symlink Can Lead To Code Execution
Priority MEDIUM 40
Helm is a package manager for Charts for Kubernetes.
TI-2025-30311 CVE-2025-47907 · GHSA-j5pm-7495-qmr3
Incorrect results returned from Rows.Scan in database/sql
Priority LOW 31
Cancelling a query (e.g.
TI-2025-06557 CVE-2025-7195 · GHSA-856v-8qm2-9wjv
Operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd
Priority LOW 28
Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID.