RHSA-2025:9294HighCVSS 8.2

Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.17.2

Published
June 19, 2025
Last Modified
August 15, 2026

🔗 CVE IDs covered (3)

CVE-2024-11831 →CVE-2024-21536 →CVE-2024-48949 →

📋 Description

CVE-2024-11831 — npm-serialize-javascript: Cross-site Scripting (XSS) in serialize-javascript CVE-2024-21536 — http-proxy-middleware: Denial of Service CVE-2024-48949 — elliptic: Missing Validation in Elliptic's EDDSA Signature Verification

🎯 Affected products109

  • Red Hat OpenShift Pipelines 1.17
  • registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:101ecb47e3f0b40279d1aec3a78b5d7f8be96b24239336c51a9565fde0532eda_arm64 as a component of Red Hat OpenShift Pipelines 1.17
  • registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:1f5d9be6bbd83415f10cb8921ad43c952c71c13e754b5852e0aefd4bb4d69d4d_s390x as a component of Red Hat OpenShift Pipelines 1.17
  • registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:3bc62443688ad0965d39ff4fb7353c1fbec9f3207a498b9543894c949b8cd37b_ppc64le as a component of Red Hat OpenShift Pipelines 1.17
  • registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:cbb6c6972a6b42c54b1896d484a8bfaee4c776d2940e0000d178b1cbcc934802_amd64 as a component of Red Hat OpenShift Pipelines 1.17
  • registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel8@sha256:43f914efbabff71cd7f5dad186b461fd87a28846b33f8c8b3d2ad38fece95983_amd64 as a component of Red Hat OpenShift Pipelines 1.17
  • registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel8@sha256:93923a0fe9763456d65dbfd50f4958728133aa3af3c100dbb7b33b726b111cc6_ppc64le as a component of Red Hat OpenShift Pipelines 1.17
  • registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel8@sha256:ca5b6198514a2b0b84cec25b2d84f5524c3f85e22c8a4f582bf58cdc13c33d33_arm64 as a component of Red Hat OpenShift Pipelines 1.17
  • registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel8@sha256:fa3e4e087d67654dd36a0a11961b0a471f58167a9318d2e1416803712f95cb8f_s390x as a component of Red Hat OpenShift Pipelines 1.17
  • registry.redhat.io/openshift-pipelines/pipelines-controller-rhel8@sha256:16f586efb58c6cc7bc1a8fde279d1de75bce5d66a3f0aee80b1ee6797124c609_amd64 as a component of Red Hat OpenShift Pipelines 1.17
  • registry.redhat.io/openshift-pipelines/pipelines-controller-rhel8@sha256:54d31d1b3a4b69e1cb82a1cc629f4fdf3676904d69f6870c97b832ae593f7f13_s390x as a component of Red Hat OpenShift Pipelines 1.17
  • registry.redhat.io/openshift-pipelines/pipelines-controller-rhel8@sha256:70f5900a3d06c2a572d2bcbf8fd6a844046532a3a50ffa4037beeeb818171073_arm64 as a component of Red Hat OpenShift Pipelines 1.17
  • registry.redhat.io/openshift-pipelines/pipelines-controller-rhel8@sha256:ae99c5f1a91ee5c5e73f17db10b3677646cf81b85b625336e82b695bf1180009_ppc64le as a component of Red Hat OpenShift Pipelines 1.17
  • registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel8@sha256:153247f44f9f1d4a98cb86e82d820cdfac6a18aca93d590e65257539cc65eb4f_amd64 as a component of Red Hat OpenShift Pipelines 1.17
  • registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel8@sha256:1bbb46244380f64e3c42faf11d37d9bd266f74cde3b51943311353510fb703a1_arm64 as a component of Red Hat OpenShift Pipelines 1.17
  • registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel8@sha256:6c4fe34f759652cfd91e5c7fc4e3661fd17211f1759177b677a4be3d74210c94_s390x as a component of Red Hat OpenShift Pipelines 1.17
  • registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel8@sha256:f487357c3919655f8c1a3ef5a7eda6b503e1188f48aca0ec40d21ff3f4c0dfb3_ppc64le as a component of Red Hat OpenShift Pipelines 1.17
  • registry.redhat.io/openshift-pipelines/pipelines-events-rhel8@sha256:24ef49b929a6e72023bbfee511f31970495018f4c3c56dcb6094abde97021ff4_ppc64le as a component of Red Hat OpenShift Pipelines 1.17
  • registry.redhat.io/openshift-pipelines/pipelines-events-rhel8@sha256:28d4486ba9d8af2e73d73c4dab37736c3a0d1cc47535d5f8aa30da4101e21eff_s390x as a component of Red Hat OpenShift Pipelines 1.17
  • registry.redhat.io/openshift-pipelines/pipelines-events-rhel8@sha256:7fa9bae00522781d284185af3e298825d69afd6aa8d71da865a8786bf5b3b0b7_arm64 as a component of Red Hat OpenShift Pipelines 1.17
  • registry.redhat.io/openshift-pipelines/pipelines-events-rhel8@sha256:9ac4af3e216374bfeaf9c6a4c5ceb9b1c541fab4fd2ad32368187b06f33dff77_amd64 as a component of Red Hat OpenShift Pipelines 1.17
  • registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel8@sha256:173d74c29d59663c3d03f41749fe31e5c560de130ce9ef2a8b1008b5d305f059_ppc64le as a component of Red Hat OpenShift Pipelines 1.17
  • registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel8@sha256:565094e155daf9d24d741d7ab72729e96e675d0a7838bec84729c34e83cb46cb_s390x as a component of Red Hat OpenShift Pipelines 1.17
  • registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel8@sha256:99fe167812ab4d23f15e22f610a59a5875a6e9abc0a60a3c5b5d44f357751a00_arm64 as a component of Red Hat OpenShift Pipelines 1.17
  • registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel8@sha256:b46c905dbb8f06f0ed8725b8da8e59673923eaf70f93276cda3f9f542379a458_amd64 as a component of Red Hat OpenShift Pipelines 1.17
  • registry.redhat.io/openshift-pipelines/pipelines-hub-api-rhel8@sha256:b863bbae0e48739eb7bf0590155f1de7ce65446f8a2a70677eb884a7267fbb04_arm64 as a component of Red Hat OpenShift Pipelines 1.17
  • registry.redhat.io/openshift-pipelines/pipelines-hub-api-rhel8@sha256:bc81e07f9488c9c952d33f4f93dec16affb7fc296727dfc64f2e791e5843aa90_ppc64le as a component of Red Hat OpenShift Pipelines 1.17
  • registry.redhat.io/openshift-pipelines/pipelines-hub-api-rhel8@sha256:cf028d3dfc329a3261976293978b92eb8e0fa1ffbb9084c890b3947202f440c7_amd64 as a component of Red Hat OpenShift Pipelines 1.17
  • registry.redhat.io/openshift-pipelines/pipelines-hub-api-rhel8@sha256:d28c686ffdf64e23fd80e74a6d32751b26f7db535bd76d60a1c814bfab744453_s390x as a component of Red Hat OpenShift Pipelines 1.17
  • registry.redhat.io/openshift-pipelines/pipelines-hub-db-migration-rhel8@sha256:2d056d0cb096ef58a583c1abbed40dbeaec29139a5ac5309bd9082704fcde7a0_s390x as a component of Red Hat OpenShift Pipelines 1.17
  • +79 more not shown

✅ Remediation

Red Hat OpenShift Pipelines is a cloud-native, continuous integration and continuous delivery (CI/CD) solution based on Kubernetes resources. It uses Tekton building blocks to automate deployments across multiple platforms by abstracting away the underlying implementation details. Tekton introduces a number of standard custom resource definitions (CRDs) for defining CI/CD pipelines that are portable across Kubernetes distributions. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Red Hat Product Security does not have any mitigation recommendations at this time.

🔗 References (7)