Red Hat Security Advisory

RHSA-2025:3734

DevWorkspace Operator 0.33.0 release.

Released 2025-04-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

DevWorkspace Operator 0.33 registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9

TI-2024-07583 CVE-2024-8176 · GHSA-9hcv-xw76-m4h6

HIGH 72

A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01353 Published 2025-03-14 Partial fix · 2.7.0, 2.7.1-1.el10_0 +18 CWE-674