Red Hat Security Advisory

RHSA-2025:9966

Red Hat Developer Hub 1.6.2 release.

Released 2025-06-30 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2025-29803 CVE-2025-47273 · GHSA-5rjg-fvgr-3xxf

HIGH 73

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.01592 Published 2025-05-17 Partial fix · 78.1.1 CWE-22

TI-2025-30712 CVE-2025-48387 · GHSA-8cj5-5rvv-wf4v

MEDIUM 44

tar-fs provides filesystem bindings for tar-stream.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00579 Published 2025-06-02 Partial fix · 1.16.5, 2.1.3 +1 CWE-22

TI-2025-24005 CVE-2025-32997 · GHSA-9gqv-wp59-fq42

LOW 24

In http-proxy-middleware before 2.0.9 and 3.x before 3.0.5, fixRequestBody proceeds even if bodyParser has failed.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00472 Published 2025-04-15 Partial fix · 2.0.9, 3.0.5 CWE-754

TI-2025-24004 CVE-2025-32996 · GHSA-4www-5p9h-95mh

LOW 24

In http-proxy-middleware before 2.0.8 and 3.x before 3.0.4, writeBody can be called twice because "else if" is not used.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00466 Published 2025-04-15 Partial fix · 2.0.8, 3.0.4 CWE-670