Red Hat Security AdvisoryRHSA-2025:8233
Red Hat OpenShift Pipelines Release 1.18.1
Released 2025-05-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Pipelines 1.18.0 registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel9, registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel9
Fixes 3 records
Priority HIGH 77
Versions of the package http-proxy-middleware before 2.0.7, from 3.0.0 and before 3.0.3 are vulnerable to Denial of Service (DoS) due to an UnhandledPromiseRejection error thrown by micromatch.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.01034 · Published 2024-10-19 · Partial fix · 2.0.7, 3.0.3 CWE-400
Priority MEDIUM 40
The verify function in lib/elliptic/eddsa/index.js in the Elliptic package before 6.5.6 for Node.js omits "sig.S().gte(sig.eddsa.curve.n) || sig.S().isNeg()" validation.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00496 · Published 2024-10-10 · Partial fix · 6.5.6 CWE-347
Priority LOW 27
A flaw was found in npm-serialize-javascript.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.01122 · Published 2025-02-10 · Partial fix · 6.0.2, 4.4.8-2 +27 CWE-79
