What is RHSA-2025:0079?

RHSA-2025:0079 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.17.2 Bug Fix Update

Which CVE IDs does RHSA-2025:0079 cover?

RHSA-2025:0079 covers the following CVE IDs: CVE-2024-43796, CVE-2024-43799, CVE-2024-43800, CVE-2024-48910, CVE-2024-55565, CVE-2024-21538. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2025:0079?

RHSA-2025:0079 has a CVSS v3 base score of 8.2, published by Red Hat Product Security.

RHSA-2025:0079HighCVSS 8.2

Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.17.2 Bug Fix Update

Vendor

Red Hat Product Security

Published

January 8, 2025

Last Modified

June 28, 2026

🔗 CVE IDs covered (6)

CVE-2024-43796 →CVE-2024-43799 →CVE-2024-43800 →CVE-2024-48910 →CVE-2024-55565 →CVE-2024-21538 →

📋 Description

CVE-2024-21538 — cross-spawn: regular expression denial of service CVE-2024-43796 — express: Improper Input Handling in Express Redirects CVE-2024-43799 — send: Code Execution Vulnerability in Send Library CVE-2024-43800 — serve-static: Improper Sanitization in serve-static CVE-2024-48910 — dompurify: DOMPurify vulnerable to tampering by prototype pollution CVE-2024-55565 — nanoid: nanoid mishandles non-integer values

🔗 References (9)

selfhttps://access.redhat.com/errata/RHSA-2025:0079
externalhttps://access.redhat.com/security/updates/classification/#important
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2311152
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2311153
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2311154
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2322949
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2324550
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2331063
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0079.json