Read the docs
Red Hat Security Advisory

RHSA-2025:4511

RHODF-4.18-RHEL-9 security update

Released 2025-05-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 7 records

TI-2024-14292 CVE-2024-21536 · GHSA-c7qv-q95q-8v27

Uncontrolled resource consumption in http-proxy-middleware

Priority HIGH 77

Versions of the package http-proxy-middleware before 2.0.7, from 3.0.0 and before 3.0.3 are vulnerable to Denial of Service (DoS) due to an UnhandledPromiseRejection error thrown by micromatch.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.01034 Published 2024-10-19 Partial fix · 2.0.7, 3.0.3 CWE-400
TI-2025-16741 CVE-2025-22869 · GHSA-hcg3-q754-cr77

Potential denial of service in golang.org/x/crypto

Priority MEDIUM 41

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but nev…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00939 Published 2025-02-26 Partial fix · 0.35.0 CWE-770
TI-2025-20001 CVE-2025-27144 · GHSA-c6gw-w398-hv78

Go JOSE's Parsing Vulnerable to Denial of Service

Priority LOW 35

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards.

CVSS 4.0MEDIUM 6.6 Network No auth No interaction EPSS 0.00399 Published 2025-02-24 Partial fix · 4.0.5, 3.0.4 CWE-770
TI-2024-19223 CVE-2024-29041 · GHSA-rv95-896h-c2vc

Express.js Open Redirect in malformed URLs

Priority LOW 29

Express.js minimalist web framework for node.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00786 Published 2024-03-25 Partial fix · 4.19.0, 5.0.0-beta.3 +1 CWE-1286