RHSA-2025:1609HighCVSS 7.5
Red Hat Security Advisory: Cluster Observability Operator 1.0.0
🔗 CVE IDs covered (3)
📋 Description
CVE-2023-26159 — follow-redirects: Improper Input Validation due to the improper handling of URLs by the url.parse() CVE-2024-28849 — follow-redirects: Possible credential leak CVE-2024-45338 — golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html
🔗 References (7)
- selfhttps://access.redhat.com/errata/RHSA-2025:1609
- externalhttps://access.redhat.com/security/updates/classification
- externalhttps://docs.openshift.com/container-platform/4.17/observability/cluster_observability_operator/cluster-observability-operator-release-notes.html
- externalhttps://access.redhat.com/security/cve/CVE-2024-45338
- externalhttps://access.redhat.com/security/cve/CVE-2024-28849
- externalhttps://access.redhat.com/security/cve/CVE-2023-26159
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1609.json