Red Hat Security Advisory

RHSA-2025:21146

Cluster Observability Operator 1.3.0

Released 2025-11-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Cluster Observability Operator 1.3.1 registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator, registry.redhat.io/cluster-observability-operator/korrel8r-rhel9

TI-2025-07108 CVE-2025-7783 · GHSA-fjxv-7rqg-78g4

HIGH 76

Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP).

CVSS 4.0CRITICAL 9.4 Network No auth No interaction EPSS 0.0181 Published 2025-07-18 Partial fix · 2.5.4, 3.0.4 +1 CWE-330

TI-2025-02483 CVE-2025-2843 · GHSA-mj6p-p843-x5wc

MEDIUM 40

A flaw was found in the Observability Operator.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00352 Published 2025-11-12 Fixed in 1.3.0, 1.3.0-1762825457 CWE-266