Red Hat Security Advisory

RHSA-2025:3595

Red Hat Developer Hub 1.4.3 release.

Released 2025-04-03 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2025-21187 CVE-2025-29775 · GHSA-x3m8-899r-f7c3

HIGH 81

xml-crypto is an XML digital signature and encryption library for Node.js.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.10141 Published 2025-03-14 Partial fix · 6.0.1, 3.2.1 +1 CWE-347

TI-2025-21186 CVE-2025-29774 · GHSA-9p8x-f768-wp2g

HIGH 81

xml-crypto is an XML digital signature and encryption library for Node.js.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.09103 Published 2025-03-14 Partial fix · 6.0.1, 3.2.1 +1 CWE-347

TI-2025-20348 CVE-2025-27516 · GHSA-cpwx-vrp4-4pq7

LOW 27

Jinja is an extensible templating engine.

CVSS 4.0MEDIUM 5.4 Local Low privileges User interaction EPSS 0.00507 Published 2025-03-05 Partial fix · 3.1.6 CWE-1336