Red Hat OpenShift Dev Spaces/devspaces-tech-preview/jetbrains-ide-rhel9

Red Hat · Package

12 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
urllib3 streaming API improperly handles highly compressed dataCVE-2025-66471 · GHSA-2XPW-W6GG-JR37Version ranges need review.	urllib3 Builds for Red Hat OpenShift/openshift-builds/openshift-builds-shared-resource-webhook-rhel9	PyPIRed Hat	High	Fix reported	2026-09-25
urllib3 allows an unbounded number of links in the decompression chainCVE-2025-66418 · GHSA-GM62-XV2J-4W53Version ranges need review.	urllib3 Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	PyPIRed Hat	High	Fix reported	2026-09-10
Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)CVE-2026-21441 · GHSA-38JV-5279-WG99Version ranges need review.	urllib3 External Secrets Operator for Red Hat OpenShift/external-secrets-operator/bitwarden-sdk-server-rhel9	PyPIRed Hat	High	Fix reported	2026-09-10
glob CLI: Command injection via -c/--cmd executes matches with shell:trueCVE-2025-64756 · GHSA-5J98-MCP5-4VW2	glob Logging Subsystem for Red Hat OpenShift/openshift-logging/logging-curator5-rhel9	npmRed Hat	High	Fix reported	2026-09-10
github.com/go-acme/lego/v4/acme/api does not enforce HTTPSCVE-2025-54799 · GHSA-Q82R-2J7M-9RV4Version ranges need review.	github.com/go-acme/lego/v3 github.com/go-acme/lego/v4	GoRed Hat	Low	Fix reported	2026-09-10
tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameterCVE-2025-54798 · GHSA-52F5-9888-HMC6	tmp Cryostat 4/io.cryostat-cryostat	npmRed Hat	Low	Fix reported	2026-09-10
Incorrect results returned from Rows.Scan in database/sqlCVE-2025-47907 · GO-2025-3849	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	GoRed Hat	Medium	Fix reported	2026-05-30
Helm Charts with Specific JSON Schema Values Can Cause Memory ExhaustionCVE-2025-55199 · GHSA-9H84-QMV7-982PVersion ranges need review.	helm.sh/helm/v3 helm.sh/helm	GoRed Hat	Medium	Fix reported	2026-02-04
Helm May Panic Due To Incorrect YAML ContentCVE-2025-55198 · GHSA-F9F8-9PMF-XV68Version ranges need review.	helm.sh/helm/v3 helm.sh/helm	GoRed Hat	Medium	Fix reported	2026-02-04
xmltodict: xmltodict XML InjectionCVE-2025-9375	OpenShift Service Mesh 3/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9 OpenShift Service Mesh 3/openshift-service-mesh/istio-cni-rhel9	Red Hat	Medium	No fix reported	Not recorded
fast-redact: fast-redact prototype pollutionCVE-2025-57319	Multicluster Engine for Kubernetes/multicluster-engine/console-mce-rhel8 Multicluster Engine for Kubernetes/multicluster-engine/console-mce-rhel9	Red Hat	Medium	No fix reported	Not recorded
codeready-ws: privilege escalation via excessive /etc/passwd permissionsCVE-2025-57850	Red Hat OpenShift Dev Spaces/devspaces-tech-preview/jetbrains-ide-rhel9 Red Hat OpenShift Dev Spaces/devspaces/code-rhel9	Red Hat	Medium	No fix reported	Not recorded