RHSA-2025:19094HighCVSS 8.8

Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.24.0 Release.

Published
October 23, 2025
Last Modified
August 23, 2026

🔗 CVE IDs covered (9)

CVE-2021-35065 →CVE-2022-46175 →CVE-2025-9566 →CVE-2025-41248 →CVE-2022-3517 →CVE-2022-25883 →CVE-2025-41249 →CVE-2025-55163 →CVE-2025-59343 →

📋 Description

CVE-2021-35065 — glob-parent: Regular Expression Denial of Service CVE-2022-3517 — nodejs-minimatch: ReDoS via the braceExpand function CVE-2022-25883 — nodejs-semver: Regular expression denial of service CVE-2022-46175 — json5: Prototype Pollution in JSON5 via Parse Method CVE-2025-9566 — podman: Podman kube play command may overwrite host files CVE-2025-41248 — org.springframework.security/spring-security-core: Spring Security authorization bypass CVE-2025-41249 — org.springframework/spring-core: Spring Framework Annotation Detection Vulnerability CVE-2025-55163 — netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability CVE-2025-59343 — tar-fs: tar-fs symlink validation bypass

🎯 Affected products62

  • Red Hat OpenShift Dev Spaces (RHOSDS) 3.24
  • registry.redhat.io/devspaces/code-rhel9@sha256:36fc35cd401140f3df7c45b8cd5682b7468a5dc8a6288d999508a2c50484eada_ppc64le as a component of Red Hat OpenShift Dev Spaces (RHOSDS) 3.24
  • registry.redhat.io/devspaces/code-rhel9@sha256:ced1d8366bbb102fb17a39e445fe3fe180db0d1db4115ba10fc71fdfa27782fe_arm64 as a component of Red Hat OpenShift Dev Spaces (RHOSDS) 3.24
  • registry.redhat.io/devspaces/code-rhel9@sha256:d7d97ca085838a96772d21b3db0e869ffbaa469a2e66e8566ad3e6464fe2ddcd_s390x as a component of Red Hat OpenShift Dev Spaces (RHOSDS) 3.24
  • registry.redhat.io/devspaces/code-rhel9@sha256:e8cb98ec2e7a8ad2ccd69796bc78b812df25bcb8be60808f1b66b56cc0e2fd99_amd64 as a component of Red Hat OpenShift Dev Spaces (RHOSDS) 3.24
  • registry.redhat.io/devspaces/code-sshd-rhel9@sha256:37ce33f42bd627f17f153fb01364daa64b9b6b6196254ff64e7f85af1ba53f8f_arm64 as a component of Red Hat OpenShift Dev Spaces (RHOSDS) 3.24
  • registry.redhat.io/devspaces/code-sshd-rhel9@sha256:6c98ccb6afaed1d71afdd10bc3e35c4edaf757d563815996b2440581d5391f02_amd64 as a component of Red Hat OpenShift Dev Spaces (RHOSDS) 3.24
  • registry.redhat.io/devspaces/code-sshd-rhel9@sha256:98412432e1e6f4351001fd847584af86edfabc1c2434e3d2cced1b6fd8b37901_s390x as a component of Red Hat OpenShift Dev Spaces (RHOSDS) 3.24
  • registry.redhat.io/devspaces/code-sshd-rhel9@sha256:dec9de28192bf1d47f578c7a4ed859c5168333bb4354f78eda5aa0c8c296ced9_ppc64le as a component of Red Hat OpenShift Dev Spaces (RHOSDS) 3.24
  • registry.redhat.io/devspaces/configbump-rhel9@sha256:2b77edd3e3bb1f26f2c39d461ebca6171f712bd9f57a8e1df6067e381d36f87d_ppc64le as a component of Red Hat OpenShift Dev Spaces (RHOSDS) 3.24
  • registry.redhat.io/devspaces/configbump-rhel9@sha256:aa83c8aa82f59c509cc3758d0e71bb868f073814fc54a142be267780eff493eb_arm64 as a component of Red Hat OpenShift Dev Spaces (RHOSDS) 3.24
  • registry.redhat.io/devspaces/configbump-rhel9@sha256:df658ffb4c2f81aefab81795a1603cec97b67e876cd0bf4927323b5bcd8732f3_amd64 as a component of Red Hat OpenShift Dev Spaces (RHOSDS) 3.24
  • registry.redhat.io/devspaces/configbump-rhel9@sha256:ec0932411e4b6de9019cd1fd775549e9e2faa2af2a387cc63221d7548fc3412c_s390x as a component of Red Hat OpenShift Dev Spaces (RHOSDS) 3.24
  • registry.redhat.io/devspaces/dashboard-rhel9@sha256:26a2fb048b53a3179390e8ce7b00525cb9a70ea6efc42126192c75e145526c97_arm64 as a component of Red Hat OpenShift Dev Spaces (RHOSDS) 3.24
  • registry.redhat.io/devspaces/dashboard-rhel9@sha256:5bf20016be741f97e1b4b59b12b055cd39540fc7bdf8799b14c8ade083f64c38_s390x as a component of Red Hat OpenShift Dev Spaces (RHOSDS) 3.24
  • registry.redhat.io/devspaces/dashboard-rhel9@sha256:872a98325c3fd3840670828d201e2d027f659335521ba27fb07f7c20f116474c_ppc64le as a component of Red Hat OpenShift Dev Spaces (RHOSDS) 3.24
  • registry.redhat.io/devspaces/dashboard-rhel9@sha256:a90ee7e5df3018c9d084d8349be7891ca6289558e14f0f94b95133f0c02d64eb_amd64 as a component of Red Hat OpenShift Dev Spaces (RHOSDS) 3.24
  • registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:34c42246ae490bce91292bcabf350cd34d091f7ff32bcb4bb012d6380f17d7e5_amd64 as a component of Red Hat OpenShift Dev Spaces (RHOSDS) 3.24
  • registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:01afee0b101671c52190be73af50b655634333b323561fa83cf31088257ba236_ppc64le as a component of Red Hat OpenShift Dev Spaces (RHOSDS) 3.24
  • registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1173a78f4140540163422db5f8bad8f11104e7254109912f38452f38ea6e2161_s390x as a component of Red Hat OpenShift Dev Spaces (RHOSDS) 3.24
  • registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:27cfd1b12714961bc952fa86f53758ae3da05f397c4d75d5f4cf09dd5949a828_amd64 as a component of Red Hat OpenShift Dev Spaces (RHOSDS) 3.24
  • registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:3a79083efd75a09e14e05234ad1c9f5f45e4204c93ac6066429643c234ef04d4_arm64 as a component of Red Hat OpenShift Dev Spaces (RHOSDS) 3.24
  • registry.redhat.io/devspaces/imagepuller-rhel9@sha256:507a595e8d25bf460f0147ca5e141011c7bec425f96b05815f9d57ad500599af_ppc64le as a component of Red Hat OpenShift Dev Spaces (RHOSDS) 3.24
  • registry.redhat.io/devspaces/imagepuller-rhel9@sha256:9179381519e3c41923792528421b3831abe2a2cb1f6e5bd106c5ce96213af9c7_amd64 as a component of Red Hat OpenShift Dev Spaces (RHOSDS) 3.24
  • registry.redhat.io/devspaces/imagepuller-rhel9@sha256:98c582c0e47250a7c17c592e84f484fcd499aa4409f7f7155b8361e26ca2df0f_arm64 as a component of Red Hat OpenShift Dev Spaces (RHOSDS) 3.24
  • registry.redhat.io/devspaces/imagepuller-rhel9@sha256:a4da702c9c8f46b44c3eb94ce92b16fdd9fb8607cfb26adeaf71a473eafe766f_s390x as a component of Red Hat OpenShift Dev Spaces (RHOSDS) 3.24
  • registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:55a135cafa015407f9e22333dd396c32e0ca87d9a94779c42ce32ee4f2e4adcb_arm64 as a component of Red Hat OpenShift Dev Spaces (RHOSDS) 3.24
  • registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:677a234cd1441ec9c2043d96f418fab48892023805775390f2c4a6bf78d298d4_ppc64le as a component of Red Hat OpenShift Dev Spaces (RHOSDS) 3.24
  • registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:90bb747ddb0bdc57fd9f3f30ce89d88af861c9a5308dcc9954344d8c1d424128_amd64 as a component of Red Hat OpenShift Dev Spaces (RHOSDS) 3.24
  • registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:9a7b13f5a8027bf2a395bb2110294029d41ca96ed68bfdb78162b0265a96b16f_s390x as a component of Red Hat OpenShift Dev Spaces (RHOSDS) 3.24
  • +32 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Workaround: Red Hat advises to not run the podman kube play command with untrusted Kubernetes YAML file as input, additionally review the Kubernetes YAML file before running it through podman may help to catch maliciously crafted secretes or volumes that may be used to exploit this vulnerability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: No mitigation is currently available that meets Red Hat Product Security’s standards for usability, deployment, applicability, or stability.

🔗 References (13)