RHSA-2025:8512HighCVSS 8.2

Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.16.4

Published
June 4, 2025
Last Modified
September 8, 2026

🔗 CVE IDs covered (3)

CVE-2024-11831 →CVE-2024-21536 →CVE-2024-48949 →

📋 Description

CVE-2024-11831 — npm-serialize-javascript: Cross-site Scripting (XSS) in serialize-javascript CVE-2024-21536 — http-proxy-middleware: Denial of Service CVE-2024-48949 — elliptic: Missing Validation in Elliptic's EDDSA Signature Verification

🎯 Affected products109

  • Red Hat OpenShift Pipelines 1.16
  • registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:518e6c4355340e342bd9e04d8ee844384978a2d6fff7d6dea6a48fb2e1f63e8e_amd64 as a component of Red Hat OpenShift Pipelines 1.16
  • registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:69b7a872672633b49ad8926be0c6bc610b728760107fc09bf2ee868a39df6f18_ppc64le as a component of Red Hat OpenShift Pipelines 1.16
  • registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:75638a356cce46e8ed20a5ba471dc4306e855ce86f8c2878d5cd37a00ee1085a_arm64 as a component of Red Hat OpenShift Pipelines 1.16
  • registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:b0a21eb4c412dd290f5c8bf5783e65f41b5aa508190794982bde148eade6f8df_s390x as a component of Red Hat OpenShift Pipelines 1.16
  • registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel8@sha256:15b283d200e626cc945bd5bfb71b883948e07ed70e97fd4da5dc678aae183808_arm64 as a component of Red Hat OpenShift Pipelines 1.16
  • registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel8@sha256:ae6f3d0387f2faddf51f1c57b346dc6dbff8b8a776bb62cee175556c35c097b0_ppc64le as a component of Red Hat OpenShift Pipelines 1.16
  • registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel8@sha256:c272f2b6955fb30660d0b585731de6746a9753147a767623b16d9eaea483fc34_s390x as a component of Red Hat OpenShift Pipelines 1.16
  • registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel8@sha256:db1807cb3c11899460267146f0c578ad6ede8a3008da7907d98ef78f75983fe2_amd64 as a component of Red Hat OpenShift Pipelines 1.16
  • registry.redhat.io/openshift-pipelines/pipelines-controller-rhel8@sha256:7e1591ba7913a5f9834576752c71e02b97ee74beaf8e37be1470e8daf67aaf20_s390x as a component of Red Hat OpenShift Pipelines 1.16
  • registry.redhat.io/openshift-pipelines/pipelines-controller-rhel8@sha256:97258af0254c6af6c72b05a511a9f789586b0d7fb2d684c900e59c4cd018e5a9_ppc64le as a component of Red Hat OpenShift Pipelines 1.16
  • registry.redhat.io/openshift-pipelines/pipelines-controller-rhel8@sha256:bf8f2adb9ff8883bb5361677e7dd34fffab3b5ea43ea59fa1a51950728f97801_arm64 as a component of Red Hat OpenShift Pipelines 1.16
  • registry.redhat.io/openshift-pipelines/pipelines-controller-rhel8@sha256:df5cb2b09fae89561d17cc37f41be922d866aeaa923cb13b2c16f2b6f7f056d4_amd64 as a component of Red Hat OpenShift Pipelines 1.16
  • registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel8@sha256:3cd2bb45e0b14f52e5781b6240c3679748734feb00040935655b178cc8128dd5_s390x as a component of Red Hat OpenShift Pipelines 1.16
  • registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel8@sha256:6cc8fc9d465b1fbf8dbebb6ad63577e81e6d324e0547d7c869124300e82df88a_arm64 as a component of Red Hat OpenShift Pipelines 1.16
  • registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel8@sha256:e0daf0f21270e67f9dfe2749d11a188f802a5ff67ec38d207c83b37f1683ea79_ppc64le as a component of Red Hat OpenShift Pipelines 1.16
  • registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel8@sha256:fc6c1b7e4097ec9928111e271b7be33383580f960cc5bbf03a5539c1c539cb1b_amd64 as a component of Red Hat OpenShift Pipelines 1.16
  • registry.redhat.io/openshift-pipelines/pipelines-events-rhel8@sha256:00362d02d8f3c118a7d11159a53b70cf7da645f47856a02a4fe0ba49a17d2901_ppc64le as a component of Red Hat OpenShift Pipelines 1.16
  • registry.redhat.io/openshift-pipelines/pipelines-events-rhel8@sha256:6f708f34340b3881f9d632d9c87807483035bdb06019f764499ed2a94c84435b_arm64 as a component of Red Hat OpenShift Pipelines 1.16
  • registry.redhat.io/openshift-pipelines/pipelines-events-rhel8@sha256:82900a5df8a001bdf454804cfa4a39c07ba98ce240f454b25e2b35d824eb416b_s390x as a component of Red Hat OpenShift Pipelines 1.16
  • registry.redhat.io/openshift-pipelines/pipelines-events-rhel8@sha256:fa7e88adc5d278674b82866290c8c8704161a2663558279ff9b5de437703945a_amd64 as a component of Red Hat OpenShift Pipelines 1.16
  • registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel8@sha256:437fb65825288c54d223ca2de92c1f17ce18d78194b192dce3160f5420e2e7a0_arm64 as a component of Red Hat OpenShift Pipelines 1.16
  • registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel8@sha256:4d3914772a435359771dddbd77619ea4c751dc7b4d4ff961e764177f0b2ff40e_amd64 as a component of Red Hat OpenShift Pipelines 1.16
  • registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel8@sha256:9cc3fcf306add7340616a5ee814213870a6b1425644af8a380eb4f08ec99faa2_s390x as a component of Red Hat OpenShift Pipelines 1.16
  • registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel8@sha256:e2e1190cc6148cf4546d1225ba15b9bb91bc22d289c0d4dffe2bc92b5fb305e7_ppc64le as a component of Red Hat OpenShift Pipelines 1.16
  • registry.redhat.io/openshift-pipelines/pipelines-hub-api-rhel8@sha256:2b67c012a0650863d30708a90f11ae4314fddb9480dbf79bdd89f8daa4608b0a_amd64 as a component of Red Hat OpenShift Pipelines 1.16
  • registry.redhat.io/openshift-pipelines/pipelines-hub-api-rhel8@sha256:3b3a7b185c0de4437b7e5e8a0e036285233ffd06e644fcdff7a1d18a778fad0b_s390x as a component of Red Hat OpenShift Pipelines 1.16
  • registry.redhat.io/openshift-pipelines/pipelines-hub-api-rhel8@sha256:75759139d8a00844682f4e4ec25de8961369b08807746a40c889bd12a8100e64_ppc64le as a component of Red Hat OpenShift Pipelines 1.16
  • registry.redhat.io/openshift-pipelines/pipelines-hub-api-rhel8@sha256:815d48f3ba930b7f061a802c0f250f35f2c1aea1117f339c53cf2c31718b1c0b_arm64 as a component of Red Hat OpenShift Pipelines 1.16
  • registry.redhat.io/openshift-pipelines/pipelines-hub-db-migration-rhel8@sha256:5854cbdf6484b1c1abfa593847df3e35c1a5292b45c9fd72f336fbf18c04fc1d_s390x as a component of Red Hat OpenShift Pipelines 1.16
  • +79 more not shown

✅ Remediation

Red Hat OpenShift Pipelines is a cloud-native, continuous integration and continuous delivery (CI/CD) solution based on Kubernetes resources. It uses Tekton building blocks to automate deployments across multiple platforms by abstracting away the underlying implementation details. Tekton introduces a number of standard custom resource definitions (CRDs) for defining CI/CD pipelines that are portable across Kubernetes distributions. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Red Hat Product Security does not have any mitigation recommendations at this time.

🔗 References (7)