RHSA-2025:8479HighCVSS 7.5

Red Hat Security Advisory: RHODF-4.16-RHEL-9 security update

Published
June 4, 2025
Last Modified
June 3, 2026

🔗 CVE IDs covered (7)

📋 Description

CVE-2024-11831 — npm-serialize-javascript: Cross-site Scripting (XSS) in serialize-javascript CVE-2024-21536 — http-proxy-middleware: Denial of Service CVE-2024-29041 — express: cause malformed URLs to be evaluated CVE-2024-39249 — nodejs-async: Regular expression denial of service while parsing function in autoinject CVE-2024-45338 — golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html CVE-2024-45590 — body-parser: Denial of Service Vulnerability in body-parser CVE-2025-30204 — golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing

🔗 References (13)