Red Hat Security Advisory

RHSA-2025:8078

Red Hat OpenShift Pipelines Release 1.15.3

Released 2025-05-21 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Pipelines 1.15 registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel8, registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel8

Fixes 2 records

TI-2024-32637 CVE-2024-48949 · GHSA-434g-2637-qmqr

The verify function in lib/elliptic/eddsa/index.js in the Elliptic package before 6.5.6…

MEDIUM 40

The verify function in lib/elliptic/eddsa/index.js in the Elliptic package before 6.5.6 for Node.js omits "sig.S().gte(sig.eddsa.curve.n) || sig.S().isNeg()" validation.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00496 Published 2024-10-10 Partial fix · 6.5.6 CWE-347

TI-2024-10975 CVE-2024-11831 · GHSA-76p7-773f-r4q5

Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript

LOW 27

A flaw was found in npm-serialize-javascript.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01122 Published 2025-02-10 Partial fix · 6.0.2, 4.4.8-2 +27 CWE-79