Red Hat Security Advisory

RHSA-2026:2454

DevWorkspace Operator 0.39.0 release.

Released 2026-02-10 · Red Hat rating Important · View on Red Hat →

Fixed in

DevWorkspace Operator 0.39 registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9, registry.redhat.io/devworkspace/devworkspace-rhel9-operator

TI-2025-30317 CVE-2025-47913 · GHSA-56w8-48fp-6mgv

MEDIUM 40

SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00668 Published 2025-11-13 Partial fix · 0.43.0 CWE-617

TI-2025-38131 CVE-2025-61729 · GHSA-7c64-f9jr-v9h2

LOW 33

Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0049 Published 2025-12-02 Partial fix · 1.24.11, 1.25.5 CWE-295