Red Hat Security Advisory

RHSA-2025:3993

Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.15.1-6 Update

Released 2025-04-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Custom Metric Autoscaler operator for Red Hat Openshift 2.15 registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9, registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9, registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9

TI-2025-21540 CVE-2025-30204 · GHSA-mh63-6h87-95cp

MEDIUM 40

golang-jwt is a Go implementation of JSON Web Tokens.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00811 Published 2025-03-21 Partial fix · 4.5.2, 5.2.2 CWE-405

TI-2025-21197 CVE-2025-29786 · GHSA-93mq-9ffx-83m2

MEDIUM 40

Expr is an expression language and expression evaluation for Go.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00625 Published 2025-03-17 Partial fix · 1.17.0 CWE-770