Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript
Priority LOW 27CWE-79Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Cross-site scripting
- Confidentiality · integrity · availability
- Low · Low · None
- Fix status
- Partial Red Hat: 24 fixed, 27 without a fix
Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-79.
Summary
A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject malicious code. This code could be executed when deserialized by a web browser, causing Cross-site scripting (XSS) attacks. This issue is critical in environments where serialized data is sent to web clients, potentially compromising the security of the website or web application using this package.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01122 66th percentileScored 2026-11-07
Fix Partial serialize-javascript: 6.0.2serialize-javascript (npm): 6.0.2Red Hat: 21 advisoriesRed Hat: 24 fixed, 27 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | serialize-javascript | 6.0 to before 6.0.2 | 6.0.2 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4.4 | — | 4.4.8-2 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4.5 | — | 4.5.6-2 | Patch available | CNA |
| Red Hat | Red Hat Ceph Storage 7.1 | — | 2:18.2.1-381.el8cp | Patch available | CNA |
| Red Hat | Red Hat Ceph Storage 8.1 | — | 2:19.2.1-292.el9cp | Patch available | CNA |
| Red Hat | Red Hat Ceph Storage 9.0 | — | 2:20.1.0-144.el10cp | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | 8.0.112-1.el8_10 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 8.0.112-1.el9_5 | Patch available | CNA |
| Red Hat | RHODF-4.14-RHEL-9 | — | v4.14.18-2 | Patch available | CNA |
| Red Hat | RHODF-4.14-RHEL-9 | — | v4.14.18-3 | Patch available | CNA |
| Red Hat | RHODF-4.14-RHEL-9 | — | v4.14.18-2 | Patch available | CNA |
| Red Hat | RHODF-4.15-RHEL-9 | — | v4.15.14-2 | Patch available | CNA |
| Red Hat | RHODF-4.15-RHEL-9 | — | v4.15.14-2 | Patch available | CNA |
| Red Hat | RHODF-4.15-RHEL-9 | — | v4.15.14-2 | Patch available | CNA |
| Red Hat | RHODF-4.16-RHEL-9 | — | v4.16.10-4 | Patch available | CNA |
| Red Hat | RHODF-4.16-RHEL-9 | — | v4.16.10-4 | Patch available | CNA |
| Red Hat | RHODF-4.16-RHEL-9 | — | v4.16.10-3 | Patch available | CNA |
| Red Hat | RHODF-4.17-RHEL-9 | — | v4.17.7-2 | Patch available | CNA |
| Red Hat | RHODF-4.17-RHEL-9 | — | v4.17.7-2 | Patch available | CNA |
| Red Hat | RHODF-4.17-RHEL-9 | — | v4.17.7-2 | Patch available | CNA |
| Red Hat | RHODF-4.18-RHEL-9 | — | v4.18.2-8 | Patch available | CNA |
| Red Hat | RHODF-4.18-RHEL-9 | — | v4.18.2-7 | Patch available | CNA |
| Red Hat | RHODF-4.18-RHEL-9 | — | v4.18.2-8 | Patch available | CNA |
| Red Hat | Red Hat Ceph Storage 7.1 | — | 1791452477 | Patch available | CNA |
| Red Hat | Red Hat Ceph Storage 8 | — | 8 | Patch available | CNA |
| Red Hat | Red Hat Ceph Storage 8.1 | — | 1787550654 | Patch available | CNA |
| Red Hat | Red Hat Ceph Storage 9.0 | — | 1776359884 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Pipelines 1.14.6 | — | v1.14.6-1744143767 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Pipelines 1.15 | — | v1.15.3-1746939886 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Pipelines 1.15 | — | v1.15.3-1746936251 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Pipelines 1.16 | — | v1.16.4-1747983385 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Pipelines 1.16 | — | v1.16.4-1747979846 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Pipelines 1.17 | — | v1.17.2-1749452800 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Pipelines 1.17 | — | v1.17.2-1750066936 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Pipelines 1.18.0 | — | v1.18.1-1747749913 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Pipelines 1.19 | — | v1.19.0-1752127853 | Patch available | CNA |
| Red Hat | Cryostat 3 | — | — | No fix listed | CNA |
| Red Hat | Logging Subsystem for Red Hat OpenShift | — | — | No fix listed | CNA |
| Red Hat | Migration Toolkit for Virtualization | — | — | Not affected | CNA |
| Red Hat | .NET 6.0 on Red Hat Enterprise Linux | — | — | No fix listed | CNA |
| Red Hat | OpenShift Lightspeed | — | — | No fix listed | CNA |
| Red Hat | OpenShift Pipelines | — | — | No fix listed | CNA |
| Red Hat | OpenShift Pipelines | — | — | No fix listed | CNA |
| Red Hat | OpenShift Serverless | — | — | No fix listed | CNA |
| Red Hat | OpenShift Service Mesh 2 | — | — | No fix listed | CNA |
| Red Hat | OpenShift Service Mesh 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat 3scale API Management Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | — | — | Not affected | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4 | — | — | Not affected | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4 | — | — | Not affected | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4 | — | — | Not affected | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4 | — | — | Not affected | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4 | — | — | Not affected | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | Not affected | CNA |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — | Not affected | CNA |
| Red Hat | Red Hat build of Apache Camel - HawtIO 4 | — | — | Not affected | CNA |
| Red Hat | Red Hat build of Apicurio Registry 2 | — | — | No fix listed | CNA |
| Red Hat | Red Hat build of OptaPlanner 8 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ceph Storage 7 | — | — | Not affected | CNA |
| Red Hat | Red Hat Ceph Storage 7 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ceph Storage 7 | — | — | Not affected | CNA |
| Red Hat | Red Hat Ceph Storage 8 | — | — | Not affected | CNA |
| Red Hat | Red Hat Ceph Storage 8 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ceph Storage 8 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ceph Storage 9 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ceph Storage 9 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Ceph Storage 9 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Data Grid 8 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Developer Hub 1 | — | — | Not affected | CNA |
| Red Hat | Red Hat Discovery 1 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 10 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | — | Not affected | CNA |
| Red Hat | Red Hat Fuse 7 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Integration Camel K 1 | — | — | Not affected | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7 | — | — | Not affected | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8 | — | — | Not affected | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform Expansion Pack | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift Container Platform 3.11 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift Dev Spaces | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift Dev Spaces | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Dev Spaces | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift distributed tracing 3 | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift distributed tracing 3 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift distributed tracing 3 | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift distributed tracing 3 | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift distributed tracing 3 | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift distributed tracing 3 | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift distributed tracing 3 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Process Automation 7 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Quay 3 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Satellite 6 | — | — | Not affected | CNA |
| Red Hat | Red Hat Satellite 6 | — | — | Not affected | CNA |
| Red Hat | Red Hat Single Sign-On 7 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Trusted Profile Analyzer | — | — | No fix listed | CNA |
| — | serialize-javascript (npm) | 6.0.0 to before 6.0.2 | 6.0.2 | Patch available | GHSA-76p7-773f-r4q5 |
- serialize-javascript Vendor— Affected 6.0 to before 6.0.2 Fixed in 6.0.2 Patch available CNA
- Red Hat Advanced Cluster Security 4.4 VendorRed Hat Affected — Fixed in 4.4.8-2 Patch available CNA
- Red Hat Advanced Cluster Security 4.5 VendorRed Hat Affected — Fixed in 4.5.6-2 Patch available CNA
- Red Hat Ceph Storage 7.1 VendorRed Hat Affected — Fixed in 2:18.2.1-381.el8cp Patch available CNA
- Red Hat Ceph Storage 8.1 VendorRed Hat Affected — Fixed in 2:19.2.1-292.el9cp Patch available CNA
- Red Hat Ceph Storage 9.0 VendorRed Hat Affected — Fixed in 2:20.1.0-144.el10cp Patch available CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 8.0.112-1.el8_10 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 8.0.112-1.el9_5 Patch available CNA
- RHODF-4.14-RHEL-9 VendorRed Hat Affected — Fixed in v4.14.18-2 Patch available CNA
- RHODF-4.14-RHEL-9 VendorRed Hat Affected — Fixed in v4.14.18-3 Patch available CNA
- RHODF-4.14-RHEL-9 VendorRed Hat Affected — Fixed in v4.14.18-2 Patch available CNA
- RHODF-4.15-RHEL-9 VendorRed Hat Affected — Fixed in v4.15.14-2 Patch available CNA
- RHODF-4.15-RHEL-9 VendorRed Hat Affected — Fixed in v4.15.14-2 Patch available CNA
- RHODF-4.15-RHEL-9 VendorRed Hat Affected — Fixed in v4.15.14-2 Patch available CNA
- RHODF-4.16-RHEL-9 VendorRed Hat Affected — Fixed in v4.16.10-4 Patch available CNA
- RHODF-4.16-RHEL-9 VendorRed Hat Affected — Fixed in v4.16.10-4 Patch available CNA
- RHODF-4.16-RHEL-9 VendorRed Hat Affected — Fixed in v4.16.10-3 Patch available CNA
- RHODF-4.17-RHEL-9 VendorRed Hat Affected — Fixed in v4.17.7-2 Patch available CNA
- RHODF-4.17-RHEL-9 VendorRed Hat Affected — Fixed in v4.17.7-2 Patch available CNA
- RHODF-4.17-RHEL-9 VendorRed Hat Affected — Fixed in v4.17.7-2 Patch available CNA
- RHODF-4.18-RHEL-9 VendorRed Hat Affected — Fixed in v4.18.2-8 Patch available CNA
- RHODF-4.18-RHEL-9 VendorRed Hat Affected — Fixed in v4.18.2-7 Patch available CNA
- RHODF-4.18-RHEL-9 VendorRed Hat Affected — Fixed in v4.18.2-8 Patch available CNA
- Red Hat Ceph Storage 7.1 VendorRed Hat Affected — Fixed in 1791452477 Patch available CNA
- Red Hat Ceph Storage 8 VendorRed Hat Affected — Fixed in 8 Patch available CNA
- Red Hat Ceph Storage 8.1 VendorRed Hat Affected — Fixed in 1787550654 Patch available CNA
- Red Hat Ceph Storage 9.0 VendorRed Hat Affected — Fixed in 1776359884 Patch available CNA
- Red Hat OpenShift Pipelines 1.14.6 VendorRed Hat Affected — Fixed in v1.14.6-1744143767 Patch available CNA
- Red Hat OpenShift Pipelines 1.15 VendorRed Hat Affected — Fixed in v1.15.3-1746939886 Patch available CNA
- Red Hat OpenShift Pipelines 1.15 VendorRed Hat Affected — Fixed in v1.15.3-1746936251 Patch available CNA
- Red Hat OpenShift Pipelines 1.16 VendorRed Hat Affected — Fixed in v1.16.4-1747983385 Patch available CNA
- Red Hat OpenShift Pipelines 1.16 VendorRed Hat Affected — Fixed in v1.16.4-1747979846 Patch available CNA
- Red Hat OpenShift Pipelines 1.17 VendorRed Hat Affected — Fixed in v1.17.2-1749452800 Patch available CNA
- Red Hat OpenShift Pipelines 1.17 VendorRed Hat Affected — Fixed in v1.17.2-1750066936 Patch available CNA
- Red Hat OpenShift Pipelines 1.18.0 VendorRed Hat Affected — Fixed in v1.18.1-1747749913 Patch available CNA
- Red Hat OpenShift Pipelines 1.19 VendorRed Hat Affected — Fixed in v1.19.0-1752127853 Patch available CNA
- Cryostat 3 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Logging Subsystem for Red Hat OpenShift VendorRed Hat Affected — Fixed in — No fix listed CNA
- Migration Toolkit for Virtualization VendorRed Hat Affected — Fixed in — Not affected CNA
- .NET 6.0 on Red Hat Enterprise Linux VendorRed Hat Affected — Fixed in — No fix listed CNA
- OpenShift Lightspeed VendorRed Hat Affected — Fixed in — No fix listed CNA
- OpenShift Pipelines VendorRed Hat Affected — Fixed in — No fix listed CNA
- OpenShift Pipelines VendorRed Hat Affected — Fixed in — No fix listed CNA
- OpenShift Serverless VendorRed Hat Affected — Fixed in — No fix listed CNA
- OpenShift Service Mesh 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- OpenShift Service Mesh 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat 3scale API Management Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Advanced Cluster Management for Kubernetes 2 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Advanced Cluster Security 4 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Advanced Cluster Security 4 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Advanced Cluster Security 4 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Advanced Cluster Security 4 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Advanced Cluster Security 4 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Ansible Automation Platform 2 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat build of Apache Camel - HawtIO 4 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat build of Apicurio Registry 2 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat build of OptaPlanner 8 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ceph Storage 7 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Ceph Storage 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ceph Storage 7 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Ceph Storage 8 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Ceph Storage 8 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ceph Storage 8 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ceph Storage 9 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ceph Storage 9 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Ceph Storage 9 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Data Grid 8 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Developer Hub 1 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Discovery 1 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Fuse 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Integration Camel K 1 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat JBoss Enterprise Application Platform 7 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat JBoss Enterprise Application Platform 8 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat JBoss Enterprise Application Platform Expansion Pack VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift Container Platform 3.11 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift Dev Spaces VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift Dev Spaces VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Dev Spaces VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift distributed tracing 3 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift distributed tracing 3 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift distributed tracing 3 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift distributed tracing 3 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift distributed tracing 3 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift distributed tracing 3 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift distributed tracing 3 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Process Automation 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Quay 3 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Satellite 6 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Satellite 6 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Single Sign-On 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Trusted Profile Analyzer VendorRed Hat Affected — Fixed in — No fix listed CNA
- serialize-javascript (npm) Vendor— Affected 6.0.0 to before 6.0.2 Fixed in 6.0.2 Patch available GHSA-76p7-773f-r4q5
CPE names CNA · 62
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:/a:redhat:advanced_cluster_security:4.4::el8 | 4.4 | — | Red Hat |
| cpe:/a:redhat:advanced_cluster_security:4.5::el8 | 4.5 | — | Red Hat |
| cpe:/a:redhat:ceph_storage:7.1::el8 | 7.1 | — | Red Hat |
| cpe:/a:redhat:ceph_storage:7.1::el9 | 7.1 | — | Red Hat |
| cpe:/a:redhat:ceph_storage:8.1::el9 | 8.1 | — | Red Hat |
| cpe:/a:redhat:ceph_storage:9.0::el10 | 9.0 | — | Red Hat |
| cpe:/a:redhat:ceph_storage:9.0::el9 | 9.0 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:8::appstream | 8 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:8::crb | 8 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:9::appstream | 9 | — | Red Hat |
- cpe:/a:redhat:advanced_cluster_security:4.4::el8 Versions 4.4 — ·Red Hat
- cpe:/a:redhat:advanced_cluster_security:4.5::el8 Versions 4.5 — ·Red Hat
- cpe:/a:redhat:ceph_storage:7.1::el8 Versions 7.1 — ·Red Hat
- cpe:/a:redhat:ceph_storage:7.1::el9 Versions 7.1 — ·Red Hat
- cpe:/a:redhat:ceph_storage:8.1::el9 Versions 8.1 — ·Red Hat
- cpe:/a:redhat:ceph_storage:9.0::el10 Versions 9.0 — ·Red Hat
- cpe:/a:redhat:ceph_storage:9.0::el9 Versions 9.0 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:8::appstream Versions 8 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:8::crb Versions 8 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:9::appstream Versions 9 — ·Red Hat
Show 52 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:/a:redhat:enterprise_linux:9::crb | 9 | — | Red Hat |
| cpe:/a:redhat:openshift_data_foundation:4.14::el9 | 4.14 | — | Red Hat |
| cpe:/a:redhat:openshift_data_foundation:4.15::el9 | 4.15 | — | Red Hat |
| cpe:/a:redhat:openshift_data_foundation:4.16::el9 | 4.16 | — | Red Hat |
| cpe:/a:redhat:openshift_data_foundation:4.17::el9 | 4.17 | — | Red Hat |
| cpe:/a:redhat:openshift_data_foundation:4.18::el9 | 4.18 | — | Red Hat |
| cpe:/a:redhat:ceph_storage:8::el9 | 8 | — | Red Hat |
| cpe:/a:redhat:openshift_pipelines:1.14::el8 | 1.14 | — | Red Hat |
| cpe:/a:redhat:openshift_pipelines:1.15::el8 | 1.15 | — | Red Hat |
| cpe:/a:redhat:openshift_pipelines:1.16::el8 | 1.16 | — | Red Hat |
| cpe:/a:redhat:openshift_pipelines:1.17::el8 | 1.17 | — | Red Hat |
| cpe:/a:redhat:openshift_pipelines:1.18::el9 | 1.18 | — | Red Hat |
| cpe:/a:redhat:openshift_pipelines:1.19::el9 | 1.19 | — | Red Hat |
| cpe:/a:redhat:cryostat:3 | 3 | — | Red Hat |
| cpe:/a:redhat:logging:5 | 5 | — | Red Hat |
| cpe:/a:redhat:migration_toolkit_virtualization:2 | 2 | — | Red Hat |
| cpe:/a:redhat:rhel_dotnet:6.0 | 6.0 | — | Red Hat |
| cpe:/a:redhat:openshift_lightspeed:1 | 1 | — | Red Hat |
| cpe:/a:redhat:openshift_pipelines:1 | 1 | — | Red Hat |
| cpe:/a:redhat:serverless:1 | 1 | — | Red Hat |
| cpe:/a:redhat:service_mesh:2 | 2 | — | Red Hat |
| cpe:/a:redhat:3scale:2.13 | 2.13 | — | Red Hat |
| cpe:/a:redhat:acm:2 | 2 | — | Red Hat |
| cpe:/a:redhat:advanced_cluster_security:4 | 4 | — | Red Hat |
| cpe:/a:redhat:ansible_automation_platform:2 | 2 | — | Red Hat |
| cpe:/a:redhat:apache_camel_hawtio:4 | 4 | — | Red Hat |
| cpe:/a:redhat:service_registry:2 | 2 | — | Red Hat |
| cpe:/a:redhat:optaplanner:::el6 | — | — | Red Hat |
| cpe:/a:redhat:ceph_storage:7 | 7 | — | Red Hat |
| cpe:/a:redhat:ceph_storage:8 | 8 | — | Red Hat |
| cpe:/a:redhat:ceph_storage:9 | 9 | — | Red Hat |
| cpe:/a:redhat:jboss_data_grid:8 | 8 | — | Red Hat |
| cpe:/a:redhat:rhdh:1 | 1 | — | Red Hat |
| cpe:/a:redhat:discovery:1 | 1 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:10 | 10 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:8 | 8 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:9 | 9 | — | Red Hat |
| cpe:/a:redhat:jboss_fuse:7 | 7 | — | Red Hat |
| cpe:/a:redhat:camel_k:1 | 1 | — | Red Hat |
| cpe:/a:redhat:jboss_enterprise_application_platform:7 | 7 | — | Red Hat |
| cpe:/a:redhat:jboss_enterprise_application_platform:8 | 8 | — | Red Hat |
| cpe:/a:redhat:jbosseapxp | — | — | Red Hat |
| cpe:/a:redhat:openshift_ai | — | — | Red Hat |
| cpe:/a:redhat:openshift:3.11 | 3.11 | — | Red Hat |
| cpe:/a:redhat:openshift:4 | 4 | — | Red Hat |
| cpe:/a:redhat:openshift_devspaces:3 | 3 | — | Red Hat |
| cpe:/a:redhat:openshift_distributed_tracing:3 | 3 | — | Red Hat |
| cpe:/a:redhat:jboss_bpms:7 | 7 | — | Red Hat |
| cpe:/a:redhat:quay:3 | 3 | — | Red Hat |
| cpe:/a:redhat:satellite:6 | 6 | — | Red Hat |
| cpe:/a:redhat:red_hat_single_sign_on:7 | 7 | — | Red Hat |
| cpe:/a:redhat:trusted_profile_analyzer:1 | 1 | — | Red Hat |
- cpe:/a:redhat:enterprise_linux:9::crb Versions 9 — ·Red Hat
- cpe:/a:redhat:openshift_data_foundation:4.14::el9 Versions 4.14 — ·Red Hat
- cpe:/a:redhat:openshift_data_foundation:4.15::el9 Versions 4.15 — ·Red Hat
- cpe:/a:redhat:openshift_data_foundation:4.16::el9 Versions 4.16 — ·Red Hat
- cpe:/a:redhat:openshift_data_foundation:4.17::el9 Versions 4.17 — ·Red Hat
- cpe:/a:redhat:openshift_data_foundation:4.18::el9 Versions 4.18 — ·Red Hat
- cpe:/a:redhat:ceph_storage:8::el9 Versions 8 — ·Red Hat
- cpe:/a:redhat:openshift_pipelines:1.14::el8 Versions 1.14 — ·Red Hat
- cpe:/a:redhat:openshift_pipelines:1.15::el8 Versions 1.15 — ·Red Hat
- cpe:/a:redhat:openshift_pipelines:1.16::el8 Versions 1.16 — ·Red Hat
- cpe:/a:redhat:openshift_pipelines:1.17::el8 Versions 1.17 — ·Red Hat
- cpe:/a:redhat:openshift_pipelines:1.18::el9 Versions 1.18 — ·Red Hat
- cpe:/a:redhat:openshift_pipelines:1.19::el9 Versions 1.19 — ·Red Hat
- cpe:/a:redhat:cryostat:3 Versions 3 — ·Red Hat
- cpe:/a:redhat:logging:5 Versions 5 — ·Red Hat
- cpe:/a:redhat:migration_toolkit_virtualization:2 Versions 2 — ·Red Hat
- cpe:/a:redhat:rhel_dotnet:6.0 Versions 6.0 — ·Red Hat
- cpe:/a:redhat:openshift_lightspeed:1 Versions 1 — ·Red Hat
- cpe:/a:redhat:openshift_pipelines:1 Versions 1 — ·Red Hat
- cpe:/a:redhat:serverless:1 Versions 1 — ·Red Hat
- cpe:/a:redhat:service_mesh:2 Versions 2 — ·Red Hat
- cpe:/a:redhat:3scale:2.13 Versions 2.13 — ·Red Hat
- cpe:/a:redhat:acm:2 Versions 2 — ·Red Hat
- cpe:/a:redhat:advanced_cluster_security:4 Versions 4 — ·Red Hat
- cpe:/a:redhat:ansible_automation_platform:2 Versions 2 — ·Red Hat
- cpe:/a:redhat:apache_camel_hawtio:4 Versions 4 — ·Red Hat
- cpe:/a:redhat:service_registry:2 Versions 2 — ·Red Hat
- cpe:/a:redhat:optaplanner:::el6 Versions — — ·Red Hat
- cpe:/a:redhat:ceph_storage:7 Versions 7 — ·Red Hat
- cpe:/a:redhat:ceph_storage:8 Versions 8 — ·Red Hat
- cpe:/a:redhat:ceph_storage:9 Versions 9 — ·Red Hat
- cpe:/a:redhat:jboss_data_grid:8 Versions 8 — ·Red Hat
- cpe:/a:redhat:rhdh:1 Versions 1 — ·Red Hat
- cpe:/a:redhat:discovery:1 Versions 1 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:10 Versions 10 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:8 Versions 8 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:9 Versions 9 — ·Red Hat
- cpe:/a:redhat:jboss_fuse:7 Versions 7 — ·Red Hat
- cpe:/a:redhat:camel_k:1 Versions 1 — ·Red Hat
- cpe:/a:redhat:jboss_enterprise_application_platform:7 Versions 7 — ·Red Hat
- cpe:/a:redhat:jboss_enterprise_application_platform:8 Versions 8 — ·Red Hat
- cpe:/a:redhat:jbosseapxp Versions — — ·Red Hat
- cpe:/a:redhat:openshift_ai Versions — — ·Red Hat
- cpe:/a:redhat:openshift:3.11 Versions 3.11 — ·Red Hat
- cpe:/a:redhat:openshift:4 Versions 4 — ·Red Hat
- cpe:/a:redhat:openshift_devspaces:3 Versions 3 — ·Red Hat
- cpe:/a:redhat:openshift_distributed_tracing:3 Versions 3 — ·Red Hat
- cpe:/a:redhat:jboss_bpms:7 Versions 7 — ·Red Hat
- cpe:/a:redhat:quay:3 Versions 3 — ·Red Hat
- cpe:/a:redhat:satellite:6 Versions 6 — ·Red Hat
- cpe:/a:redhat:red_hat_single_sign_on:7 Versions 7 — ·Red Hat
- cpe:/a:redhat:trusted_profile_analyzer:1 Versions 1 — ·Red Hat
Remediation
- Fix · CNA serialize-javascript Fixed in 6.0.2
- Fix · GHSA-76p7-773f-r4q5 serialize-javascript (npm) Fixed in 6.0.2 Advisory →
Red Hat 21 advisories
- RHSA-2026:83548 Released 2026-10-15 · Red Hat rating ImportantRed Hat Ceph Storage
- Red Hat Ceph Storage 7.1 registry.redhat.io/rhceph/grafana-rhel9, registry.redhat.io/rhceph/rhceph-7-rhel9
- RHSA-2026:62115 Released 2026-09-01 · Red Hat rating ImportantRed Hat Ceph Storage
- Red Hat Ceph Storage 8.1 registry.redhat.io/rhceph/grafana-rhel9, registry.redhat.io/rhceph/rhceph-8-rhel9
- RHSA-2026:8568 Released 2026-04-16 · Red Hat rating ModerateNew container image: rhceph-9.0
- Red Hat Ceph Storage 9.0 registry.redhat.io/rhceph/rhceph-9-rhel9
Show 18 more Red Hat advisories
- RHSA-2026:2769 Released 2026-02-17 · Red Hat rating ImportantRed Hat Ceph Storage 7.1 security and bug fix updates
- Red Hat Ceph Storage 7.1 Tools ceph-2:18.2.1-381.el8cp, ceph-2:18.2.1-381.el9cp, ceph-base-2:18.2.1-381.el8cp +47
- RHSA-2026:1536 Released 2026-01-29 · Red Hat rating ModerateRed Hat Ceph Storage 9.0 Security and Enhancement update
- Red Hat Ceph Storage 9.0 Tools ceph-2:20.1.0-144.el10cp, ceph-2:20.1.0-144.el9cp, ceph-base-2:20.1.0-144.el10cp +47
- RHSA-2025:21203 Released 2025-11-12 · Red Hat rating ImportantRed Hat Ceph Storage
- Red Hat Ceph Storage 8 registry.redhat.io/rhceph/rhceph-8-rhel9
- RHSA-2025:21068 Released 2025-11-12 · Red Hat rating ImportantRed Hat Ceph Storage 8.1 bug fix update
- Red Hat Ceph Storage 8.1 Tools ceph-2:19.2.1-292.el9cp, ceph-base-2:19.2.1-292.el9cp, ceph-common-2:19.2.1-292.el9cp +25
- RHSA-2025:10853 Released 2025-07-14 · Red Hat rating ImportantRed Hat OpenShift Pipelines Release 1.19.0
- Red Hat OpenShift Pipelines 1.19 registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel9, registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel9
- RHSA-2025:9294 Released 2025-06-19 · Red Hat rating ImportantRed Hat OpenShift Pipelines Release 1.17.2
- Red Hat OpenShift Pipelines 1.17 registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel8, registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel8
- RHSA-2025:8551 Released 2025-06-04 · Red Hat rating ImportantRed Hat OpenShift Data Foundation 4.14.18 Bug Fix Update
- RHODF 4.14 for RHEL 9 odf4/ocs-client-console-rhel9, odf4/odf-console-rhel9, odf4/odf-multicluster-console-rhel9 +1
- RHSA-2025:8544 Released 2025-06-04 · Red Hat rating ImportantRed Hat OpenShift Data Foundation 4.15.14 Bug Fix Update
- RHODF 4.15 for RHEL 9 odf4/mcg-rhel9-operator, odf4/ocs-client-console-rhel9, odf4/odf-console-rhel9 +2
- RHSA-2025:8512 Released 2025-06-04 · Red Hat rating ImportantRed Hat OpenShift Pipelines Release 1.16.4
- Red Hat OpenShift Pipelines 1.16 registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel8, registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel8
- RHSA-2025:8479 Released 2025-06-04 · Red Hat rating ImportantRHODF-4.16-RHEL-9 security update
- RHODF 4.16 for RHEL 9 odf4/cephcsi-rhel9, odf4/mcg-rhel9-operator, odf4/ocs-client-console-rhel9 +4
- RHSA-2025:8233 Released 2025-05-27 · Red Hat rating ImportantRed Hat OpenShift Pipelines Release 1.18.1
- Red Hat OpenShift Pipelines 1.18.0 registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel9, registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel9
- RHSA-2025:8078 Released 2025-05-21 · Red Hat rating ImportantRed Hat OpenShift Pipelines Release 1.15.3
- Red Hat OpenShift Pipelines 1.15 registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel8, registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel8
- RHSA-2025:8059 Released 2025-05-21 · Red Hat rating ImportantRed Hat OpenShift Data Foundation 4.17.7 Bug Fix Update
- RHODF 4.17 for RHEL 9 odf4/cephcsi-rhel9, odf4/mcg-rhel9-operator, odf4/ocs-client-console-rhel9 +8
- RHSA-2025:4511 Released 2025-05-06 · Red Hat rating ImportantRHODF-4.18-RHEL-9 security update
- RHODF 4.18 for RHEL 9 odf4/cephcsi-rhel9, odf4/mcg-rhel9-operator, odf4/ocs-client-console-rhel9 +7
- RHSA-2025:3870 Released 2025-04-14 · Red Hat rating ModerateRed Hat OpenShift Pipelines Release 1.14.6
- Red Hat OpenShift Pipelines 1.14.6 registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel8
- RHSA-2025:1468 Released 2025-02-13 · Red Hat rating ImportantACS 4.4 enhancement and security update
- RHACS 4.4 for RHEL 8 advanced-cluster-security/rhacs-central-db-rhel8, advanced-cluster-security/rhacs-main-rhel8, advanced-cluster-security/rhacs-rhel8-operator +1
- RHSA-2025:1334 Released 2025-02-11 · Red Hat rating ImportantACS 4.5 enhancement and security update
- RHACS 4.5 for RHEL 8 advanced-cluster-security/rhacs-central-db-rhel8, advanced-cluster-security/rhacs-main-rhel8, advanced-cluster-security/rhacs-rhel8-operator +5
- RHSA-2025:0381 Released 2025-01-16 · Red Hat rating Important.NET 8.0 security update
- Red Hat Enterprise Linux AppStream (v. 8) aspnetcore-runtime-8.0-8.0.12-1.el8_10, aspnetcore-runtime-dbg-8.0-8.0.12-1.el8_10, aspnetcore-targeting-pack-8.0-8.0.12-1.el8_10 +9
- Red Hat Enterprise Linux CRB (v. 8) dotnet-sdk-8.0-source-built-artifacts-8.0.112-1.el8_10
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| .NET 6.0 on Red Hat Enterprise Linux | Affected | No fix planned: Out of support scope |
| Cryostat 3 | Affected | No fix planned: Will not fix |
| Logging Subsystem for Red Hat OpenShift | Affected | No fix yet |
| OpenShift Lightspeed | Affected | No fix yet |
| OpenShift Pipelines | Affected | No fix planned: Will not fix |
| OpenShift Serverless | Affected | No fix planned: Will not fix |
| OpenShift Service Mesh 2 | Affected | No fix yet |
| Red Hat 3scale API Management Platform 2 | Affected | No fix planned: Will not fix |
| Red Hat Ansible Automation Platform 2 | Affected | No fix yet |
| Red Hat Ceph Storage 7 | Affected | No fix yet |
| Red Hat Ceph Storage 8 | Affected | No fix yet |
| Red Hat Ceph Storage 9 | Affected | No fix yet |
| Red Hat Data Grid 8 | Affected | No fix planned: Will not fix |
| Red Hat Discovery 1 | Affected | No fix yet |
| Red Hat Enterprise Linux 8 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux 9 | Affected | No fix planned: Out of support scope |
| Red Hat Fuse 7 | Affected | No fix planned: Will not fix |
| Red Hat OpenShift AI (RHOAI) | Affected | No fix yet |
| Red Hat OpenShift Container Platform 3.11 | Affected | No fix planned: Will not fix |
| Red Hat OpenShift Dev Spaces | Affected | No fix planned: Will not fix |
| Red Hat OpenShift distributed tracing 3 | Affected | No fix yet |
| Red Hat Process Automation 7 | Affected | No fix planned: Will not fix |
| Red Hat Quay 3 | Affected | No fix yet |
| Red Hat Single Sign-On 7 | Affected | No fix yet |
| Red Hat Trusted Profile Analyzer | Affected | No fix yet |
| Red Hat build of Apicurio Registry 2 | Affected | No fix yet |
| Red Hat build of OptaPlanner 8 | Affected | No fix planned: Will not fix |
| RHACS 4.4 for RHEL 8 | Fixed | RHSA-2025:1468 |
| RHACS 4.5 for RHEL 8 | Fixed | RHSA-2025:1334 |
| RHODF 4.14 for RHEL 9 | Fixed | RHSA-2025:8551 |
| RHODF 4.15 for RHEL 9 | Fixed | RHSA-2025:8544 |
| RHODF 4.16 for RHEL 9 | Fixed | RHSA-2025:8479 |
| RHODF 4.17 for RHEL 9 | Fixed | RHSA-2025:8059 |
| RHODF 4.18 for RHEL 9 | Fixed | RHSA-2025:4511 |
| Red Hat Ceph Storage 7.1 | Fixed | RHSA-2026:83548 |
| Red Hat Ceph Storage 7.1 Tools | Fixed | RHSA-2026:2769 |
| Red Hat Ceph Storage 8 | Fixed | RHSA-2025:21203 |
| Red Hat Ceph Storage 8.1 | Fixed | RHSA-2026:62115 |
| Red Hat Ceph Storage 8.1 Tools | Fixed | RHSA-2025:21068 |
| Red Hat Ceph Storage 9.0 | Fixed | RHSA-2026:8568 |
| Red Hat Ceph Storage 9.0 Tools | Fixed | RHSA-2026:1536 |
| Red Hat CodeReady Linux Builder (v. 9) | Fixed | — |
| Red Hat Enterprise Linux AppStream (v. 8) | Fixed | RHSA-2025:0381 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | — |
| Red Hat Enterprise Linux CRB (v. 8) | Fixed | RHSA-2025:0381 |
| Red Hat OpenShift Pipelines 1.14.6 | Fixed | RHSA-2025:3870 |
| Red Hat OpenShift Pipelines 1.15 | Fixed | RHSA-2025:8078 |
| Red Hat OpenShift Pipelines 1.16 | Fixed | RHSA-2025:8512 |
| Red Hat OpenShift Pipelines 1.17 | Fixed | RHSA-2025:9294 |
| Red Hat OpenShift Pipelines 1.18.0 | Fixed | RHSA-2025:8233 |
| Red Hat OpenShift Pipelines 1.19 | Fixed | RHSA-2025:10853 |
Not affected: 37 products
- Migration Toolkit for Virtualization
- RHACS 4.4 for RHEL 8
- RHACS 4.5 for RHEL 8
- RHODF 4.14 for RHEL 9
- RHODF 4.15 for RHEL 9
- RHODF 4.16 for RHEL 9
- RHODF 4.17 for RHEL 9
- RHODF 4.18 for RHEL 9
- Red Hat Advanced Cluster Management for Kubernetes 2
- Red Hat Advanced Cluster Security 4
- Red Hat Ansible Automation Platform 2
- Red Hat Ceph Storage 7
- Red Hat Ceph Storage 7.1
- Red Hat Ceph Storage 8
- Red Hat Ceph Storage 8.1
- Red Hat Ceph Storage 9.0
- Red Hat Ceph Storage 9.0 Tools
- Red Hat Developer Hub 1
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Red Hat Integration Camel K 1
- Red Hat JBoss Enterprise Application Platform 7
- Red Hat JBoss Enterprise Application Platform 8
- Red Hat JBoss Enterprise Application Platform Expansion Pack
- Red Hat OpenShift AI (RHOAI)
- Red Hat OpenShift Container Platform 4
- Red Hat OpenShift Dev Spaces
- Red Hat OpenShift Pipelines 1.14.6
- Red Hat OpenShift Pipelines 1.15
- Red Hat OpenShift Pipelines 1.16
- Red Hat OpenShift Pipelines 1.17
- Red Hat OpenShift Pipelines 1.18.0
- Red Hat OpenShift Pipelines 1.19
- Red Hat OpenShift distributed tracing 3
- Red Hat Satellite 6
- Red Hat build of Apache Camel - HawtIO 4
Timeline
- 2026-10-02 Threatist record created from CVE-2024-11831
- 2026-10-03 Alias added: GHSA-76p7-773f-r4q5
- 2026-10-08 Affected versions changed · CNA
- 2026-10-09 Affected versions changed · Red Hat
- 2026-10-09 Affected versions changed · CNA
- 2026-10-14 Affected versions changed · CNA
- 2026-10-16 1 new reference · GHSA-76p7-773f-r4q5
- 2026-10-16 Fix available: rhceph/rhceph-7-rhel9@1791452477 · CNA
- 2026-10-16 1 new reference · CNA
- 2026-10-16 Fix available: RHSA-2026:83548 · Red Hat
- 2026-10-16 Fix available: Red Hat Ceph Storage 7.1 · Red Hat
- 2026-10-23 Affected versions changed · CNA
- 2026-10-27 Affected versions changed · CNA
- 2026-10-27 Affected versions changed · Red Hat
- 2026-10-30 Affected versions changed · CNA
- 2026-11-05 Affected versions changed · CNA
- 2026-11-06 Fix available: RHSA-2026:8568 · Red Hat
- 2026-11-06 Fix available: RHSA-2025:8078 · Red Hat
References
Advisory 23
- RHBA-2025:0304
- RHSA-2025:0381
- RHSA-2025:10853
- RHSA-2025:1334
- RHSA-2025:1468
- RHSA-2025:21068
- RHSA-2025:21203
- RHSA-2025:3870
- RHSA-2025:4511
- RHSA-2025:8059
- RHSA-2025:8078
- RHSA-2025:8233
- RHSA-2025:8479
- RHSA-2025:8512
- RHSA-2025:8544
- RHSA-2025:8551
- RHSA-2025:9294
- RHSA-2026:1536
- RHSA-2026:2769
- RHSA-2026:62115
- RHSA-2026:83548
- RHSA-2026:8568
- https://nvd.nist.gov/vuln/detail/CVE-2024-11831
Other 6
- https://access.redhat.com/security/cve/CVE-2024-11831
- RHBZ#2312579
- https://github.com/yahoo/serialize-javascript/commit/f27d65d3de42affe2aac14607066c293891cec4e
- https://github.com/yahoo/serialize-javascript/pull/173
- https://github.com/yahoo/serialize-javascript/commit/7f3ac252d86b802454cb43782820aea2e0f6dc25
- https://github.com/yahoo/serialize-javascript
More Red Hat vulnerabilities
- TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
- TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
- TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
- TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2024-11831 · CVE Program
- CVE-2024-11831 · NVD
- FIRST EPSS
- GHSA-76p7-773f-r4q5 · GitHub Advisory Database · CC BY 4.0
- CVE-2024-11831 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences