Read the docs
Red Hat Security Advisory

RHSA-2025:8274

Errata Advisory for Red Hat OpenShift GitOps v1.14.4 security update

Released 2025-05-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 7 records

TI-2023-24278 CVE-2023-45288 · GHSA-4v7x-pqxf-cx7m

HTTP/2 CONTINUATION flood in net/http

Priority HIGH 81

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.89455 Published 2024-04-04 Partial fix · 1.21.9, 1.22.2 +1 CWE-400
TI-2025-30326 CVE-2025-47933 · GHSA-2hj5-g64g-fp6p

Argo CD allows cross-site scripting on repositories page

Priority MEDIUM 42

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.

CVSS 3.1CRITICAL 9.1 Network Low privileges User interaction EPSS 0.00486 Published 2025-05-29 Partial fix · 2.13.8, 2.14.13 +1 CWE-79
TI-2025-16741 CVE-2025-22869 · GHSA-hcg3-q754-cr77

Potential denial of service in golang.org/x/crypto

Priority MEDIUM 41

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but nev…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00939 Published 2025-02-26 Partial fix · 0.35.0 CWE-770