Red Hat Security AdvisoryRHSA-2025:3928
ACS 4.5 enhancement and security update
Released 2025-04-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHACS 4.5 for RHEL 8 advanced-cluster-security/rhacs-central-db-rhel8, advanced-cluster-security/rhacs-collector-rhel8, advanced-cluster-security/rhacs-collector-slim-rhel8 +10
Fixes 3 records
Priority HIGH 77
Versions of the package http-proxy-middleware before 2.0.7, from 3.0.0 and before 3.0.3 are vulnerable to Denial of Service (DoS) due to an UnhandledPromiseRejection error thrown by micromatch.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.01034 · Published 2024-10-19 · Partial fix · 2.0.7, 3.0.3 CWE-400
Priority HIGH 72
A prototype pollution in the component Module.mergeObjects (redoc/bundles/redoc.lib.js:2) of redoc <= 2.2.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00557 · Published 2025-03-28 · Partial fix · 2.4.0 CWE-1321
Priority MEDIUM 40
golang-jwt is a Go implementation of JSON Web Tokens.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00811 · Published 2025-03-21 · Partial fix · 4.5.2, 5.2.2 CWE-405
