TI-2025-36412 CVE-2025-58754 · GHSA-4hjh-wcwx-xvwj
Axios is vulnerable to DoS attack through lack of data size check
Priority HIGH 72
Axios is a promise based HTTP client for the browser and Node.js.
RHSA-2026:1018
Red Hat OpenShift GitOps v1.17.4 security update
Released 2026-01-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift GitOps 1.17 registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8, registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8, registry.redhat.io/openshift-gitops-1/argocd-rhel8 +4
Fixes 6 records
TI-2025-34866 CVE-2025-55190 · GHSA-786q-9hcg-v9ff
Argo CD: Project API Token Exposes Repository Credentials
Priority MEDIUM 51
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.
TI-2025-30317 CVE-2025-47913 · GHSA-56w8-48fp-6mgv
Potential denial of service in golang.org/x/crypto/ssh/agent
Priority MEDIUM 40
SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.
TI-2025-41736 CVE-2025-68156 · GHSA-cfpf-hrx2-8rv6
Expr has Denial of Service via Unbounded Recursion in Builtin Functions
Priority LOW 39
Expr is an expression language and expression evaluation for Go.
TI-2025-38131 CVE-2025-61729 · GHSA-7c64-f9jr-v9h2
Excessive resource consumption when printing error string for host certificate validation in crypto/x509
Priority LOW 33
Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out.
TI-2025-35990 CVE-2025-58183 · GHSA-9gcr-gp5f-jw27
Unbounded allocation when parsing GNU sparse map in archive/tar
Priority LOW 20
tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files.