Red Hat Security Advisory

RHSA-2025:22861

Red Hat Developer Hub 1.8.1 release.

Released 2025-12-08 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Developer Hub 1.8 registry.redhat.io/rhdh/rhdh-hub-rhel9

Fixes 2 records

TI-2025-40557 CVE-2025-66031 · GHSA-554w-wpv2-vw27

node-forge ASN.1 Unbounded Recursion

MEDIUM 44

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00446 Published 2025-11-26 Partial fix · 1.3.2 CWE-674

TI-2025-37710 CVE-2025-60542 · GHSA-q2pj-6v73-8rgj

SQL Injection vulnerability in TypeORM before 0.3.26 via crafted request to…

LOW 36

SQL Injection vulnerability in TypeORM before 0.3.26 via crafted request to repository.save or repository.update due to the sqlstring call using stringifyObjects default to false.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00265 Published 2025-10-29 Fixed in 0.3.26 CWE-89