Red Hat OpenShift Dev Spaces/devspaces/imagepuller-rhel9

Red Hat · Package

8 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
github.com/go-acme/lego/v4/acme/api does not enforce HTTPSCVE-2025-54799 · GHSA-Q82R-2J7M-9RV4Version ranges need review.	github.com/go-acme/lego/v3 github.com/go-acme/lego/v4	GoRed Hat	Low	Fix reported	2026-09-10
Axios is vulnerable to DoS attack through lack of data size checkCVE-2025-58754 · GHSA-4HJH-WCWX-XVWJ	axios Migration Toolkit for Applications 8/mta/mta-ui-rhel9	npmRed Hat	High	Fix reported	2026-09-10
tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameterCVE-2025-54798 · GHSA-52F5-9888-HMC6	tmp Cryostat 4/io.cryostat-cryostat	npmRed Hat	Low	Fix reported	2026-09-10
Incorrect results returned from Rows.Scan in database/sqlCVE-2025-47907 · GO-2025-3849	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	GoRed Hat	Medium	Fix reported	2026-05-30
Helm Charts with Specific JSON Schema Values Can Cause Memory ExhaustionCVE-2025-55199 · GHSA-9H84-QMV7-982PVersion ranges need review.	helm.sh/helm/v3 helm.sh/helm	GoRed Hat	Medium	Fix reported	2026-02-04
Helm May Panic Due To Incorrect YAML ContentCVE-2025-55198 · GHSA-F9F8-9PMF-XV68Version ranges need review.	helm.sh/helm/v3 helm.sh/helm	GoRed Hat	Medium	Fix reported	2026-02-04
xmltodict: xmltodict XML InjectionCVE-2025-9375	OpenShift Service Mesh 3/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9 OpenShift Service Mesh 3/openshift-service-mesh/istio-cni-rhel9	Red Hat	Medium	No fix reported	Not recorded
fast-redact: fast-redact prototype pollutionCVE-2025-57319	Multicluster Engine for Kubernetes/multicluster-engine/console-mce-rhel8 Multicluster Engine for Kubernetes/multicluster-engine/console-mce-rhel9	Red Hat	Medium	No fix reported	Not recorded