Read the docs
Red Hat Security Advisory

RHSA-2025:21704

Red Hat OpenShift Data Foundation 4.20 security, enhancement & bug fix update

Released 2025-11-18 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 7 records

TI-2025-05315 CVE-2025-5889 · GHSA-v6h2-p8h4-qcjw

juliangruber brace-expansion index.js expand redos

Priority MEDIUM 45

A vulnerability was found in juliangruber brace-expansion up to 1.1.11/2.0.1/3.0.0/4.0.0.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00611 Published 2025-06-09 Partial fix · 1.1.12, 2.0.2 +2 CWE-1333
TI-2025-16741 CVE-2025-22869 · GHSA-hcg3-q754-cr77

Potential denial of service in golang.org/x/crypto

Priority MEDIUM 41

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but nev…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00939 Published 2025-02-26 Partial fix · 0.35.0 CWE-770
TI-2024-30408 CVE-2024-45338 · GHSA-w32m-9786-jp63

Non-linear parsing of case-insensitive content in golang.org/x/net/html

Priority LOW 32

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01072 Published 2024-12-18 Partial fix · 0.33.0 CWE-1333