Red Hat Security AdvisoryRHSA-2025:8244
Red Hat OpenShift Dev Spaces 3.21.0 release
Released 2025-05-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Dev Spaces 3 devspaces-tech-preview/idea-rhel9, devspaces-tech-preview/jetbrains-ide-rhel9, devspaces/code-rhel9 +11
Fixes 5 records
Priority MEDIUM 53
Applications and libraries which misuse connection.serverAuthenticate (via callback field ServerConfig.PublicKeyCallback) may be susceptible to an authorization bypass.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.03181 · Published 2024-12-11 · Partial fix · 0.31.0 CWE-285
Priority MEDIUM 52
Traefik is a golang, Cloud Native Application Proxy.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01513 · Published 2024-09-19 · Fixed in 2.11.9, 3.1.3 CWE-345
Priority MEDIUM 43
An Improper Link Resolution Before File Access ("Link Following") and Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal").
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02299 · Published 2025-03-27 · Partial fix · 1.16.4, 2.1.2 +2 CWE-22
Priority MEDIUM 41
SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but nev…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00939 · Published 2025-02-26 · Partial fix · 0.35.0 CWE-770
Priority MEDIUM 40
golang-jwt is a Go implementation of JSON Web Tokens.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00811 · Published 2025-03-21 · Partial fix · 4.5.2, 5.2.2 CWE-405
THREATIST.IORead the docs