RHSA-2025:22905HighCVSS 8.1
Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.19.4
🔗 CVE IDs covered (5)
📋 Description
CVE-2025-6545 — pbkdf2: pbkdf2 silently returns predictable key material CVE-2025-6547 — pbkdf2: pbkdf2 silently returns static keys CVE-2025-9287 — cipher-base: Cipher-base hash manipulation CVE-2025-9288 — sha.js: Missing type checks leading to hash rewind and passing on crafted data CVE-2025-64756 — glob: glob: Command Injection Vulnerability via Malicious Filenames
🔗 References (9)
- selfhttps://access.redhat.com/errata/RHSA-2025:22905
- externalhttps://access.redhat.com/security/cve/CVE-2025-64756
- externalhttps://access.redhat.com/security/cve/CVE-2025-6545
- externalhttps://access.redhat.com/security/cve/CVE-2025-6547
- externalhttps://access.redhat.com/security/cve/CVE-2025-9287
- externalhttps://access.redhat.com/security/cve/CVE-2025-9288
- externalhttps://access.redhat.com/security/updates/classification/
- externalhttps://docs.redhat.com/en/documentation/red_hat_openshift_pipelines
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22905.json