rhsa-2025:3993
Vulnerability from csaf_redhat
Published
2025-04-17 14:42
Modified
2025-08-19 03:12
Summary
Red Hat Security Advisory: Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.15.1-6 Update

Notes

Topic
Custom Metrics Autoscaler Operator for Red Hat OpenShift updates. The following updates for the Custom Metric Autoscaler operator for Red Hat OpenShift are now available: * custom-metrics-autoscaler-adapter-container * custom-metrics-autoscaler-admission-webhooks-container * custom-metrics-autoscaler-container * custom-metrics-autoscaler-operator-bundle-container * custom-metrics-autoscaler-operator-container
Details
The Custom Metrics Autoscaler Operator for Red Hat OpenShift is an optional operator, based on the Kubernetes Event Driven Autoscaler (KEDA), which allows workloads to be scaled using additional metrics sources other than pod metrics. This release is based upon KEDA 2.15.1
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.


To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Custom Metrics Autoscaler Operator for Red Hat OpenShift updates.\nThe following updates for the Custom Metric Autoscaler operator for Red Hat OpenShift are now available:\n* custom-metrics-autoscaler-adapter-container * custom-metrics-autoscaler-admission-webhooks-container * custom-metrics-autoscaler-container * custom-metrics-autoscaler-operator-bundle-container * custom-metrics-autoscaler-operator-container",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The Custom Metrics Autoscaler Operator for Red Hat OpenShift is an optional operator, based on the Kubernetes Event Driven Autoscaler (KEDA), which allows workloads to be scaled using additional metrics sources other than pod metrics.\nThis release is based upon KEDA 2.15.1",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:3993",
        "url": "https://access.redhat.com/errata/RHSA-2025:3993"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-29786",
        "url": "https://access.redhat.com/security/cve/CVE-2025-29786"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-30204",
        "url": "https://access.redhat.com/security/cve/CVE-2025-30204"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3993.json"
      }
    ],
    "title": "Red Hat Security Advisory: Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.15.1-6 Update",
    "tracking": {
      "current_release_date": "2025-08-19T03:12:53+00:00",
      "generator": {
        "date": "2025-08-19T03:12:53+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.6"
        }
      },
      "id": "RHSA-2025:3993",
      "initial_release_date": "2025-04-17T14:42:51+00:00",
      "revision_history": [
        {
          "date": "2025-04-17T14:42:51+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-04-17T14:42:51+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-08-19T03:12:53+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Custom Metric Autoscaler operator for Red Hat Openshift 2.15",
                "product": {
                  "name": "Custom Metric Autoscaler operator for Red Hat Openshift 2.15",
                  "product_id": "Custom Metric Autoscaler operator for Red Hat Openshift 2.15",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.15::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Custom Metric Autoscaler operator for Red Hat Openshift"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator@sha256:7ed1cf4aab0cdc460733c8a5bef79476e015be75322beec2908c54b97b71568c_amd64",
                "product": {
                  "name": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator@sha256:7ed1cf4aab0cdc460733c8a5bef79476e015be75322beec2908c54b97b71568c_amd64",
                  "product_id": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator@sha256:7ed1cf4aab0cdc460733c8a5bef79476e015be75322beec2908c54b97b71568c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/custom-metrics-autoscaler-rhel9-operator@sha256%3A7ed1cf4aab0cdc460733c8a5bef79476e015be75322beec2908c54b97b71568c?arch=amd64\u0026repository_url=registry.redhat.io/custom-metrics-autoscaler\u0026tag=2.15.1-1744845320"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-operator-bundle@sha256:623280ae8997a354e5fb3275afaf0d2bb5d260b5bae0c7f56b858b7dc33a1e48_amd64",
                "product": {
                  "name": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-operator-bundle@sha256:623280ae8997a354e5fb3275afaf0d2bb5d260b5bae0c7f56b858b7dc33a1e48_amd64",
                  "product_id": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-operator-bundle@sha256:623280ae8997a354e5fb3275afaf0d2bb5d260b5bae0c7f56b858b7dc33a1e48_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/custom-metrics-autoscaler-operator-bundle@sha256%3A623280ae8997a354e5fb3275afaf0d2bb5d260b5bae0c7f56b858b7dc33a1e48?arch=amd64\u0026repository_url=registry.redhat.io/custom-metrics-autoscaler\u0026tag=2.15.1-1744847971"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9@sha256:0166a9dc52e4b24030198460a061dc4fc649e6007b99213a38496aada2aaaba6_amd64",
                "product": {
                  "name": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9@sha256:0166a9dc52e4b24030198460a061dc4fc649e6007b99213a38496aada2aaaba6_amd64",
                  "product_id": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9@sha256:0166a9dc52e4b24030198460a061dc4fc649e6007b99213a38496aada2aaaba6_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/custom-metrics-autoscaler-adapter-rhel9@sha256%3A0166a9dc52e4b24030198460a061dc4fc649e6007b99213a38496aada2aaaba6?arch=amd64\u0026repository_url=registry.redhat.io/custom-metrics-autoscaler\u0026tag=2.15.1-1744845058"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9@sha256:e25cd6d10cc023428bfb3c82a8a59ff0620ac835a326a01ef5ea79688cbfc800_amd64",
                "product": {
                  "name": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9@sha256:e25cd6d10cc023428bfb3c82a8a59ff0620ac835a326a01ef5ea79688cbfc800_amd64",
                  "product_id": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9@sha256:e25cd6d10cc023428bfb3c82a8a59ff0620ac835a326a01ef5ea79688cbfc800_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/custom-metrics-autoscaler-rhel9@sha256%3Ae25cd6d10cc023428bfb3c82a8a59ff0620ac835a326a01ef5ea79688cbfc800?arch=amd64\u0026repository_url=registry.redhat.io/custom-metrics-autoscaler\u0026tag=2.15.1-1744845044"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9@sha256:6e8caff3ab7ad5e103fa809f4be7a672c7ef3d9f86f26afeb9d275bdd58d73d8_amd64",
                "product": {
                  "name": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9@sha256:6e8caff3ab7ad5e103fa809f4be7a672c7ef3d9f86f26afeb9d275bdd58d73d8_amd64",
                  "product_id": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9@sha256:6e8caff3ab7ad5e103fa809f4be7a672c7ef3d9f86f26afeb9d275bdd58d73d8_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/custom-metrics-autoscaler-admission-webhooks-rhel9@sha256%3A6e8caff3ab7ad5e103fa809f4be7a672c7ef3d9f86f26afeb9d275bdd58d73d8?arch=amd64\u0026repository_url=registry.redhat.io/custom-metrics-autoscaler\u0026tag=2.15.1-1744845343"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator@sha256:a8b5fa8dbd33ae84baa4c3f04a7429ffa509bafe8ec275a19232ff23d742566c_arm64",
                "product": {
                  "name": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator@sha256:a8b5fa8dbd33ae84baa4c3f04a7429ffa509bafe8ec275a19232ff23d742566c_arm64",
                  "product_id": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator@sha256:a8b5fa8dbd33ae84baa4c3f04a7429ffa509bafe8ec275a19232ff23d742566c_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/custom-metrics-autoscaler-rhel9-operator@sha256%3Aa8b5fa8dbd33ae84baa4c3f04a7429ffa509bafe8ec275a19232ff23d742566c?arch=arm64\u0026repository_url=registry.redhat.io/custom-metrics-autoscaler\u0026tag=2.15.1-1744845320"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9@sha256:37f8337ab2ecf2c6023a5813c66d3dfb2a09176772a7a8dc24e2ebfd543aceb2_arm64",
                "product": {
                  "name": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9@sha256:37f8337ab2ecf2c6023a5813c66d3dfb2a09176772a7a8dc24e2ebfd543aceb2_arm64",
                  "product_id": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9@sha256:37f8337ab2ecf2c6023a5813c66d3dfb2a09176772a7a8dc24e2ebfd543aceb2_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/custom-metrics-autoscaler-adapter-rhel9@sha256%3A37f8337ab2ecf2c6023a5813c66d3dfb2a09176772a7a8dc24e2ebfd543aceb2?arch=arm64\u0026repository_url=registry.redhat.io/custom-metrics-autoscaler\u0026tag=2.15.1-1744845058"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9@sha256:f4cae34187a11abd88edc84bb0e78da3fe4e54bbe3845ca34819de2efd9f6b61_arm64",
                "product": {
                  "name": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9@sha256:f4cae34187a11abd88edc84bb0e78da3fe4e54bbe3845ca34819de2efd9f6b61_arm64",
                  "product_id": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9@sha256:f4cae34187a11abd88edc84bb0e78da3fe4e54bbe3845ca34819de2efd9f6b61_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/custom-metrics-autoscaler-rhel9@sha256%3Af4cae34187a11abd88edc84bb0e78da3fe4e54bbe3845ca34819de2efd9f6b61?arch=arm64\u0026repository_url=registry.redhat.io/custom-metrics-autoscaler\u0026tag=2.15.1-1744845044"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9@sha256:da1e3c2b2b151b918791058c20bba72f4a29dc87f3b0c8b3a0ba316d0f42b78d_arm64",
                "product": {
                  "name": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9@sha256:da1e3c2b2b151b918791058c20bba72f4a29dc87f3b0c8b3a0ba316d0f42b78d_arm64",
                  "product_id": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9@sha256:da1e3c2b2b151b918791058c20bba72f4a29dc87f3b0c8b3a0ba316d0f42b78d_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/custom-metrics-autoscaler-admission-webhooks-rhel9@sha256%3Ada1e3c2b2b151b918791058c20bba72f4a29dc87f3b0c8b3a0ba316d0f42b78d?arch=arm64\u0026repository_url=registry.redhat.io/custom-metrics-autoscaler\u0026tag=2.15.1-1744845343"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9@sha256:0166a9dc52e4b24030198460a061dc4fc649e6007b99213a38496aada2aaaba6_amd64 as a component of Custom Metric Autoscaler operator for Red Hat Openshift 2.15",
          "product_id": "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9@sha256:0166a9dc52e4b24030198460a061dc4fc649e6007b99213a38496aada2aaaba6_amd64"
        },
        "product_reference": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9@sha256:0166a9dc52e4b24030198460a061dc4fc649e6007b99213a38496aada2aaaba6_amd64",
        "relates_to_product_reference": "Custom Metric Autoscaler operator for Red Hat Openshift 2.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9@sha256:37f8337ab2ecf2c6023a5813c66d3dfb2a09176772a7a8dc24e2ebfd543aceb2_arm64 as a component of Custom Metric Autoscaler operator for Red Hat Openshift 2.15",
          "product_id": "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9@sha256:37f8337ab2ecf2c6023a5813c66d3dfb2a09176772a7a8dc24e2ebfd543aceb2_arm64"
        },
        "product_reference": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9@sha256:37f8337ab2ecf2c6023a5813c66d3dfb2a09176772a7a8dc24e2ebfd543aceb2_arm64",
        "relates_to_product_reference": "Custom Metric Autoscaler operator for Red Hat Openshift 2.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9@sha256:6e8caff3ab7ad5e103fa809f4be7a672c7ef3d9f86f26afeb9d275bdd58d73d8_amd64 as a component of Custom Metric Autoscaler operator for Red Hat Openshift 2.15",
          "product_id": "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9@sha256:6e8caff3ab7ad5e103fa809f4be7a672c7ef3d9f86f26afeb9d275bdd58d73d8_amd64"
        },
        "product_reference": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9@sha256:6e8caff3ab7ad5e103fa809f4be7a672c7ef3d9f86f26afeb9d275bdd58d73d8_amd64",
        "relates_to_product_reference": "Custom Metric Autoscaler operator for Red Hat Openshift 2.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9@sha256:da1e3c2b2b151b918791058c20bba72f4a29dc87f3b0c8b3a0ba316d0f42b78d_arm64 as a component of Custom Metric Autoscaler operator for Red Hat Openshift 2.15",
          "product_id": "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9@sha256:da1e3c2b2b151b918791058c20bba72f4a29dc87f3b0c8b3a0ba316d0f42b78d_arm64"
        },
        "product_reference": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9@sha256:da1e3c2b2b151b918791058c20bba72f4a29dc87f3b0c8b3a0ba316d0f42b78d_arm64",
        "relates_to_product_reference": "Custom Metric Autoscaler operator for Red Hat Openshift 2.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-operator-bundle@sha256:623280ae8997a354e5fb3275afaf0d2bb5d260b5bae0c7f56b858b7dc33a1e48_amd64 as a component of Custom Metric Autoscaler operator for Red Hat Openshift 2.15",
          "product_id": "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-operator-bundle@sha256:623280ae8997a354e5fb3275afaf0d2bb5d260b5bae0c7f56b858b7dc33a1e48_amd64"
        },
        "product_reference": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-operator-bundle@sha256:623280ae8997a354e5fb3275afaf0d2bb5d260b5bae0c7f56b858b7dc33a1e48_amd64",
        "relates_to_product_reference": "Custom Metric Autoscaler operator for Red Hat Openshift 2.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator@sha256:7ed1cf4aab0cdc460733c8a5bef79476e015be75322beec2908c54b97b71568c_amd64 as a component of Custom Metric Autoscaler operator for Red Hat Openshift 2.15",
          "product_id": "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator@sha256:7ed1cf4aab0cdc460733c8a5bef79476e015be75322beec2908c54b97b71568c_amd64"
        },
        "product_reference": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator@sha256:7ed1cf4aab0cdc460733c8a5bef79476e015be75322beec2908c54b97b71568c_amd64",
        "relates_to_product_reference": "Custom Metric Autoscaler operator for Red Hat Openshift 2.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator@sha256:a8b5fa8dbd33ae84baa4c3f04a7429ffa509bafe8ec275a19232ff23d742566c_arm64 as a component of Custom Metric Autoscaler operator for Red Hat Openshift 2.15",
          "product_id": "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator@sha256:a8b5fa8dbd33ae84baa4c3f04a7429ffa509bafe8ec275a19232ff23d742566c_arm64"
        },
        "product_reference": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator@sha256:a8b5fa8dbd33ae84baa4c3f04a7429ffa509bafe8ec275a19232ff23d742566c_arm64",
        "relates_to_product_reference": "Custom Metric Autoscaler operator for Red Hat Openshift 2.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9@sha256:e25cd6d10cc023428bfb3c82a8a59ff0620ac835a326a01ef5ea79688cbfc800_amd64 as a component of Custom Metric Autoscaler operator for Red Hat Openshift 2.15",
          "product_id": "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9@sha256:e25cd6d10cc023428bfb3c82a8a59ff0620ac835a326a01ef5ea79688cbfc800_amd64"
        },
        "product_reference": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9@sha256:e25cd6d10cc023428bfb3c82a8a59ff0620ac835a326a01ef5ea79688cbfc800_amd64",
        "relates_to_product_reference": "Custom Metric Autoscaler operator for Red Hat Openshift 2.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9@sha256:f4cae34187a11abd88edc84bb0e78da3fe4e54bbe3845ca34819de2efd9f6b61_arm64 as a component of Custom Metric Autoscaler operator for Red Hat Openshift 2.15",
          "product_id": "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9@sha256:f4cae34187a11abd88edc84bb0e78da3fe4e54bbe3845ca34819de2efd9f6b61_arm64"
        },
        "product_reference": "registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9@sha256:f4cae34187a11abd88edc84bb0e78da3fe4e54bbe3845ca34819de2efd9f6b61_arm64",
        "relates_to_product_reference": "Custom Metric Autoscaler operator for Red Hat Openshift 2.15"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-29786",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2025-03-17T14:00:59.078419+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9@sha256:6e8caff3ab7ad5e103fa809f4be7a672c7ef3d9f86f26afeb9d275bdd58d73d8_amd64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9@sha256:da1e3c2b2b151b918791058c20bba72f4a29dc87f3b0c8b3a0ba316d0f42b78d_arm64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-operator-bundle@sha256:623280ae8997a354e5fb3275afaf0d2bb5d260b5bae0c7f56b858b7dc33a1e48_amd64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator@sha256:7ed1cf4aab0cdc460733c8a5bef79476e015be75322beec2908c54b97b71568c_amd64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator@sha256:a8b5fa8dbd33ae84baa4c3f04a7429ffa509bafe8ec275a19232ff23d742566c_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2352914"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Expr. This vulnerability allows excessive memory usage and potential out-of-memory (OOM) crashes via unbounded input strings, where a malicious or inadvertent large expression can cause the parser to construct an extremely large Abstract Syntax Tree (AST), consuming excessive memory.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/expr-lang/expr: Memory Exhaustion in Expr Parser with Unrestricted Input",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9@sha256:0166a9dc52e4b24030198460a061dc4fc649e6007b99213a38496aada2aaaba6_amd64",
          "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9@sha256:37f8337ab2ecf2c6023a5813c66d3dfb2a09176772a7a8dc24e2ebfd543aceb2_arm64",
          "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9@sha256:e25cd6d10cc023428bfb3c82a8a59ff0620ac835a326a01ef5ea79688cbfc800_amd64",
          "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9@sha256:f4cae34187a11abd88edc84bb0e78da3fe4e54bbe3845ca34819de2efd9f6b61_arm64"
        ],
        "known_not_affected": [
          "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9@sha256:6e8caff3ab7ad5e103fa809f4be7a672c7ef3d9f86f26afeb9d275bdd58d73d8_amd64",
          "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9@sha256:da1e3c2b2b151b918791058c20bba72f4a29dc87f3b0c8b3a0ba316d0f42b78d_arm64",
          "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-operator-bundle@sha256:623280ae8997a354e5fb3275afaf0d2bb5d260b5bae0c7f56b858b7dc33a1e48_amd64",
          "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator@sha256:7ed1cf4aab0cdc460733c8a5bef79476e015be75322beec2908c54b97b71568c_amd64",
          "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator@sha256:a8b5fa8dbd33ae84baa4c3f04a7429ffa509bafe8ec275a19232ff23d742566c_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-29786"
        },
        {
          "category": "external",
          "summary": "RHBZ#2352914",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2352914"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-29786",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-29786"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-29786",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-29786"
        },
        {
          "category": "external",
          "summary": "https://github.com/expr-lang/expr/pull/762",
          "url": "https://github.com/expr-lang/expr/pull/762"
        },
        {
          "category": "external",
          "summary": "https://github.com/expr-lang/expr/security/advisories/GHSA-93mq-9ffx-83m2",
          "url": "https://github.com/expr-lang/expr/security/advisories/GHSA-93mq-9ffx-83m2"
        }
      ],
      "release_date": "2025-03-17T13:15:32.836000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-04-17T14:42:51+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/operators/administrator-tasks#olm-upgrading-operators",
          "product_ids": [
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9@sha256:0166a9dc52e4b24030198460a061dc4fc649e6007b99213a38496aada2aaaba6_amd64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9@sha256:37f8337ab2ecf2c6023a5813c66d3dfb2a09176772a7a8dc24e2ebfd543aceb2_arm64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9@sha256:e25cd6d10cc023428bfb3c82a8a59ff0620ac835a326a01ef5ea79688cbfc800_amd64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9@sha256:f4cae34187a11abd88edc84bb0e78da3fe4e54bbe3845ca34819de2efd9f6b61_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:3993"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, it is recommended to impose an input size restriction before parsing (i.e. validating or limiting the length of expression strings that the application will accept). Ensuring no unbounded-length expressions are fed into the parser will prevent the parser from constructing a very large AST and avoid the potential memory exhaustion issue.",
          "product_ids": [
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9@sha256:0166a9dc52e4b24030198460a061dc4fc649e6007b99213a38496aada2aaaba6_amd64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9@sha256:37f8337ab2ecf2c6023a5813c66d3dfb2a09176772a7a8dc24e2ebfd543aceb2_arm64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9@sha256:6e8caff3ab7ad5e103fa809f4be7a672c7ef3d9f86f26afeb9d275bdd58d73d8_amd64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9@sha256:da1e3c2b2b151b918791058c20bba72f4a29dc87f3b0c8b3a0ba316d0f42b78d_arm64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-operator-bundle@sha256:623280ae8997a354e5fb3275afaf0d2bb5d260b5bae0c7f56b858b7dc33a1e48_amd64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator@sha256:7ed1cf4aab0cdc460733c8a5bef79476e015be75322beec2908c54b97b71568c_amd64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator@sha256:a8b5fa8dbd33ae84baa4c3f04a7429ffa509bafe8ec275a19232ff23d742566c_arm64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9@sha256:e25cd6d10cc023428bfb3c82a8a59ff0620ac835a326a01ef5ea79688cbfc800_amd64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9@sha256:f4cae34187a11abd88edc84bb0e78da3fe4e54bbe3845ca34819de2efd9f6b61_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9@sha256:0166a9dc52e4b24030198460a061dc4fc649e6007b99213a38496aada2aaaba6_amd64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9@sha256:37f8337ab2ecf2c6023a5813c66d3dfb2a09176772a7a8dc24e2ebfd543aceb2_arm64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9@sha256:6e8caff3ab7ad5e103fa809f4be7a672c7ef3d9f86f26afeb9d275bdd58d73d8_amd64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9@sha256:da1e3c2b2b151b918791058c20bba72f4a29dc87f3b0c8b3a0ba316d0f42b78d_arm64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-operator-bundle@sha256:623280ae8997a354e5fb3275afaf0d2bb5d260b5bae0c7f56b858b7dc33a1e48_amd64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator@sha256:7ed1cf4aab0cdc460733c8a5bef79476e015be75322beec2908c54b97b71568c_amd64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator@sha256:a8b5fa8dbd33ae84baa4c3f04a7429ffa509bafe8ec275a19232ff23d742566c_arm64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9@sha256:e25cd6d10cc023428bfb3c82a8a59ff0620ac835a326a01ef5ea79688cbfc800_amd64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9@sha256:f4cae34187a11abd88edc84bb0e78da3fe4e54bbe3845ca34819de2efd9f6b61_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/expr-lang/expr: Memory Exhaustion in Expr Parser with Unrestricted Input"
    },
    {
      "cve": "CVE-2025-30204",
      "cwe": {
        "id": "CWE-405",
        "name": "Asymmetric Resource Consumption (Amplification)"
      },
      "discovery_date": "2025-03-21T22:00:43.818367+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-operator-bundle@sha256:623280ae8997a354e5fb3275afaf0d2bb5d260b5bae0c7f56b858b7dc33a1e48_amd64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator@sha256:7ed1cf4aab0cdc460733c8a5bef79476e015be75322beec2908c54b97b71568c_amd64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator@sha256:a8b5fa8dbd33ae84baa4c3f04a7429ffa509bafe8ec275a19232ff23d742566c_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2354195"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the golang-jwt implementation of JSON Web Tokens (JWT). In affected versions, a malicious request with specially crafted Authorization header data may trigger an excessive consumption of resources on the host system. This issue can cause significant performance degradation or an application crash, leading to a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9@sha256:0166a9dc52e4b24030198460a061dc4fc649e6007b99213a38496aada2aaaba6_amd64",
          "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9@sha256:37f8337ab2ecf2c6023a5813c66d3dfb2a09176772a7a8dc24e2ebfd543aceb2_arm64",
          "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9@sha256:6e8caff3ab7ad5e103fa809f4be7a672c7ef3d9f86f26afeb9d275bdd58d73d8_amd64",
          "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9@sha256:da1e3c2b2b151b918791058c20bba72f4a29dc87f3b0c8b3a0ba316d0f42b78d_arm64",
          "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9@sha256:e25cd6d10cc023428bfb3c82a8a59ff0620ac835a326a01ef5ea79688cbfc800_amd64",
          "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9@sha256:f4cae34187a11abd88edc84bb0e78da3fe4e54bbe3845ca34819de2efd9f6b61_arm64"
        ],
        "known_not_affected": [
          "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-operator-bundle@sha256:623280ae8997a354e5fb3275afaf0d2bb5d260b5bae0c7f56b858b7dc33a1e48_amd64",
          "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator@sha256:7ed1cf4aab0cdc460733c8a5bef79476e015be75322beec2908c54b97b71568c_amd64",
          "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator@sha256:a8b5fa8dbd33ae84baa4c3f04a7429ffa509bafe8ec275a19232ff23d742566c_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-30204"
        },
        {
          "category": "external",
          "summary": "RHBZ#2354195",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2354195"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-30204",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-30204"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-30204",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-30204"
        },
        {
          "category": "external",
          "summary": "https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3",
          "url": "https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3"
        },
        {
          "category": "external",
          "summary": "https://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp",
          "url": "https://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2025-3553",
          "url": "https://pkg.go.dev/vuln/GO-2025-3553"
        }
      ],
      "release_date": "2025-03-21T21:42:01.382000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-04-17T14:42:51+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/operators/administrator-tasks#olm-upgrading-operators",
          "product_ids": [
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9@sha256:0166a9dc52e4b24030198460a061dc4fc649e6007b99213a38496aada2aaaba6_amd64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9@sha256:37f8337ab2ecf2c6023a5813c66d3dfb2a09176772a7a8dc24e2ebfd543aceb2_arm64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9@sha256:6e8caff3ab7ad5e103fa809f4be7a672c7ef3d9f86f26afeb9d275bdd58d73d8_amd64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9@sha256:da1e3c2b2b151b918791058c20bba72f4a29dc87f3b0c8b3a0ba316d0f42b78d_arm64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9@sha256:e25cd6d10cc023428bfb3c82a8a59ff0620ac835a326a01ef5ea79688cbfc800_amd64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9@sha256:f4cae34187a11abd88edc84bb0e78da3fe4e54bbe3845ca34819de2efd9f6b61_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:3993"
        },
        {
          "category": "workaround",
          "details": "Red Hat Product Security does not have a recommended mitigation at this time.",
          "product_ids": [
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9@sha256:0166a9dc52e4b24030198460a061dc4fc649e6007b99213a38496aada2aaaba6_amd64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9@sha256:37f8337ab2ecf2c6023a5813c66d3dfb2a09176772a7a8dc24e2ebfd543aceb2_arm64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9@sha256:6e8caff3ab7ad5e103fa809f4be7a672c7ef3d9f86f26afeb9d275bdd58d73d8_amd64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9@sha256:da1e3c2b2b151b918791058c20bba72f4a29dc87f3b0c8b3a0ba316d0f42b78d_arm64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-operator-bundle@sha256:623280ae8997a354e5fb3275afaf0d2bb5d260b5bae0c7f56b858b7dc33a1e48_amd64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator@sha256:7ed1cf4aab0cdc460733c8a5bef79476e015be75322beec2908c54b97b71568c_amd64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator@sha256:a8b5fa8dbd33ae84baa4c3f04a7429ffa509bafe8ec275a19232ff23d742566c_arm64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9@sha256:e25cd6d10cc023428bfb3c82a8a59ff0620ac835a326a01ef5ea79688cbfc800_amd64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9@sha256:f4cae34187a11abd88edc84bb0e78da3fe4e54bbe3845ca34819de2efd9f6b61_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9@sha256:0166a9dc52e4b24030198460a061dc4fc649e6007b99213a38496aada2aaaba6_amd64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9@sha256:37f8337ab2ecf2c6023a5813c66d3dfb2a09176772a7a8dc24e2ebfd543aceb2_arm64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9@sha256:6e8caff3ab7ad5e103fa809f4be7a672c7ef3d9f86f26afeb9d275bdd58d73d8_amd64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9@sha256:da1e3c2b2b151b918791058c20bba72f4a29dc87f3b0c8b3a0ba316d0f42b78d_arm64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-operator-bundle@sha256:623280ae8997a354e5fb3275afaf0d2bb5d260b5bae0c7f56b858b7dc33a1e48_amd64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator@sha256:7ed1cf4aab0cdc460733c8a5bef79476e015be75322beec2908c54b97b71568c_amd64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator@sha256:a8b5fa8dbd33ae84baa4c3f04a7429ffa509bafe8ec275a19232ff23d742566c_arm64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9@sha256:e25cd6d10cc023428bfb3c82a8a59ff0620ac835a326a01ef5ea79688cbfc800_amd64",
            "Custom Metric Autoscaler operator for Red Hat Openshift 2.15:registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9@sha256:f4cae34187a11abd88edc84bb0e78da3fe4e54bbe3845ca34819de2efd9f6b61_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.