TI-2025-19705 CVE-2025-26791 · GHSA-vhxf-7vqr-mrjg
Cross-site scripting in cure53 DOMPurify
Priority MEDIUM 60
DOMPurify before 3.2.4 has an incorrect template literal regular expression, sometimes leading to mutation cross-site scripting (mXSS).
RHSA-2025:3886
RHOAI 2.19.0 - Red Hat OpenShift AI
Released 2025-04-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift AI 2.19 registry.redhat.io/rhoai/odh-dashboard-rhel8, registry.redhat.io/rhoai/odh-model-controller-rhel8, registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel8
Fixes 2 records
TI-2025-16740 CVE-2025-22868 · GHSA-6v2p-p543-phr9
Unexpected memory consumption during token parsing in golang.org/x/oauth2
Priority MEDIUM 40
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.