TI-2025-36412 CVE-2025-58754 · GHSA-4hjh-wcwx-xvwj
Axios is vulnerable to DoS attack through lack of data size check
Priority HIGH 72
Axios is a promise based HTTP client for the browser and Node.js.
RHSA-2026:0627
Red Hat Advanced Cluster Management for Kubernetes v2.13.5 security update
Released 2026-01-14 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Advanced Cluster Management for Kubernetes 2.13 registry.redhat.io/rhacm2/acm-cli-rhel9, registry.redhat.io/rhacm2/acm-cluster-permission-rhel9, registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9 +19
Fixes 7 records
TI-2025-08513 CVE-2025-9288 · GHSA-95m3-7q98-8xr5
Missing type checks leading to hash rewind and passing on crafted data
Priority HIGH 72
Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.This issue affects sha.js: through 2.4.11.
TI-2025-08512 CVE-2025-9287 · GHSA-cpq7-6gpm-g9rc
Missing type checks leading to hash rewind and passing on crafted data
Priority HIGH 72
Improper Input Validation vulnerability in cipher-base allows Input Data Manipulation.This issue affects cipher-base: through 1.0.4.
TI-2025-20001 CVE-2025-27144 · GHSA-c6gw-w398-hv78
Go JOSE's Parsing Vulnerable to Denial of Service
Priority LOW 35
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards.
TI-2025-30311 CVE-2025-47907 · GHSA-j5pm-7495-qmr3
Incorrect results returned from Rows.Scan in database/sql
Priority LOW 31
Cancelling a query (e.g.
TI-2025-06557 CVE-2025-7195 · GHSA-856v-8qm2-9wjv
Operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd
Priority LOW 28
Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID.
TI-2025-35990 CVE-2025-58183 · GHSA-9gcr-gp5f-jw27
Unbounded allocation when parsing GNU sparse map in archive/tar
Priority LOW 20
tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files.