Vulnerability-Lookup

RHBA-2025:8213

Vulnerability from csaf_redhat - Published: 2025-06-17 17:46 - Updated: 2026-11-05 12:14

Summary

Red Hat Bug Fix Advisory: Red Hat Quay v3.9.12 bug fix release

Severity

Important

Notes

Topic: Red Hat Quay 3.9.12 is now available with bug fixes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: Quay 3.9.12

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2025-21605

A flaw was found in the Redis server. This flaw allows an unauthenticated client to cause an unlimited growth of output buffers until the server runs out of memory or is killed. By default, the Redis configuration does not limit the output buffer of normal clients (see client-output-buffer-limit). Therefore, the output buffer can grow unlimitedly over time. As a result, the service is exhausted, and the memory is unavailable. When password authentication is enabled on the Redis server but no password is provided, the client can still cause the output buffer to grow from "NOAUTH" responses until the system runs out of memory.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 10 products

Product	Version	Remediation
Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:c6ddb026071df0c5e2ed254f1dd59754282425f62bbb0108ecef79b278693c5c_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ab6e96abc329c5f72fe1b0d8f58f12318cd6a839f3cdc9d2ee67e62d73230932_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fbe4a163a7ee8275375fb4c03fdb416bf7f71bb3e80db8e60f21e54d9e505ff0_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:abafc0e59f6668214728f1d11d39f207a50e32285d34ec42be360b9958ef9df2_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:937c11c2809a12b2609d3869d843a6735bbc1b1f7ba02e999682ad695eff8a88_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e94a181d8eee7fba81d293c70a470920ee02b6b2f8f5f368b7445cb030a52456_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9fcfd2de9adadf3d3a983b0051d2a0043bde78cbe18cea36c10198d61a9708e8_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:bc579e916a49be8a4faeae6aaa2a6b7f127c4cc1ee8e5d51c73a645969bbbd0f_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:3baee927a5c71de6824979ec457a388fbfecdcc8c0cbe2f1ceb0e083bcb8a248_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:b86c95b701c8725673d785ef5aa514aa9b9b0c67ac5c3ff5d1b15541e0196a19_amd64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2025-27144

A flaw was found in GO-JOSE. In affected versions, when parsing compact JWS or JWE input, Go JOSE could use excessive memory. The code uses strings.Split(token, ".") to split JWT tokens, which is vulnerable to excessive memory consumption when processing maliciously crafted tokens with a large number of `.` characters. This issue could be exploied by sending numerous malformed tokens, leading to memory exhaustion and a Denial of Service.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 10 products, the same list as for CVE-2025-21605

Threats

Impact Moderate

References

15 references

URL	Category
https://access.redhat.com/errata/RHBA-2025:8213	self
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2025-21605	self
https://bugzilla.redhat.com/show_bug.cgi?id=2361883	external
https://www.cve.org/CVERecord?id=CVE-2025-21605	external
https://nvd.nist.gov/vuln/detail/CVE-2025-21605	external
https://github.com/redis/redis/releases/tag/7.4.3	external
https://github.com/redis/redis/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2025-27144	self
https://bugzilla.redhat.com/show_bug.cgi?id=2347423	external
https://www.cve.org/CVERecord?id=CVE-2025-27144	external
https://nvd.nist.gov/vuln/detail/CVE-2025-27144	external
https://github.com/go-jose/go-jose/commit/99b346c…	external
https://github.com/go-jose/go-jose/releases/tag/v4.0.5	external
https://github.com/go-jose/go-jose/security/advis…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat Quay 3.9.12 is now available with bug fixes.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Quay 3.9.12",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHBA-2025:8213",
        "url": "https://access.redhat.com/errata/RHBA-2025:8213"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_8213.json"
      }
    ],
    "title": "Red Hat Bug Fix Advisory: Red Hat Quay v3.9.12 bug fix release",
    "tracking": {
      "current_release_date": "2026-11-05T12:14:56+00:00",
      "generator": {
        "date": "2026-11-05T12:14:56+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.4"
        }
      },
      "id": "RHBA-2025:8213",
      "initial_release_date": "2025-06-17T17:46:03+00:00",
      "revision_history": [
        {
          "date": "2025-06-17T17:46:03+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-06-17T17:46:03+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-11-05T12:14:56+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Quay v3",
                "product": {
                  "name": "Quay v3",
                  "product_id": "8Base-Quay-3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:quay:3::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Quay"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-bundle@sha256:ab6e96abc329c5f72fe1b0d8f58f12318cd6a839f3cdc9d2ee67e62d73230932_amd64",
                "product": {
                  "name": "quay/quay-bridge-operator-bundle@sha256:ab6e96abc329c5f72fe1b0d8f58f12318cd6a839f3cdc9d2ee67e62d73230932_amd64",
                  "product_id": "quay/quay-bridge-operator-bundle@sha256:ab6e96abc329c5f72fe1b0d8f58f12318cd6a839f3cdc9d2ee67e62d73230932_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256:ab6e96abc329c5f72fe1b0d8f58f12318cd6a839f3cdc9d2ee67e62d73230932?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.9.12-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-rhel8@sha256:fbe4a163a7ee8275375fb4c03fdb416bf7f71bb3e80db8e60f21e54d9e505ff0_amd64",
                "product": {
                  "name": "quay/quay-bridge-operator-rhel8@sha256:fbe4a163a7ee8275375fb4c03fdb416bf7f71bb3e80db8e60f21e54d9e505ff0_amd64",
                  "product_id": "quay/quay-bridge-operator-rhel8@sha256:fbe4a163a7ee8275375fb4c03fdb416bf7f71bb3e80db8e60f21e54d9e505ff0_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:fbe4a163a7ee8275375fb4c03fdb416bf7f71bb3e80db8e60f21e54d9e505ff0?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.9.12-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-rhel8@sha256:937c11c2809a12b2609d3869d843a6735bbc1b1f7ba02e999682ad695eff8a88_amd64",
                "product": {
                  "name": "quay/quay-builder-rhel8@sha256:937c11c2809a12b2609d3869d843a6735bbc1b1f7ba02e999682ad695eff8a88_amd64",
                  "product_id": "quay/quay-builder-rhel8@sha256:937c11c2809a12b2609d3869d843a6735bbc1b1f7ba02e999682ad695eff8a88_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256:937c11c2809a12b2609d3869d843a6735bbc1b1f7ba02e999682ad695eff8a88?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.9.12-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:abafc0e59f6668214728f1d11d39f207a50e32285d34ec42be360b9958ef9df2_amd64",
                "product": {
                  "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:abafc0e59f6668214728f1d11d39f207a50e32285d34ec42be360b9958ef9df2_amd64",
                  "product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:abafc0e59f6668214728f1d11d39f207a50e32285d34ec42be360b9958ef9df2_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:abafc0e59f6668214728f1d11d39f207a50e32285d34ec42be360b9958ef9df2?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.9.12-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/clair-rhel8@sha256:c6ddb026071df0c5e2ed254f1dd59754282425f62bbb0108ecef79b278693c5c_amd64",
                "product": {
                  "name": "quay/clair-rhel8@sha256:c6ddb026071df0c5e2ed254f1dd59754282425f62bbb0108ecef79b278693c5c_amd64",
                  "product_id": "quay/clair-rhel8@sha256:c6ddb026071df0c5e2ed254f1dd59754282425f62bbb0108ecef79b278693c5c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256:c6ddb026071df0c5e2ed254f1dd59754282425f62bbb0108ecef79b278693c5c?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.9.12-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-bundle@sha256:e94a181d8eee7fba81d293c70a470920ee02b6b2f8f5f368b7445cb030a52456_amd64",
                "product": {
                  "name": "quay/quay-container-security-operator-bundle@sha256:e94a181d8eee7fba81d293c70a470920ee02b6b2f8f5f368b7445cb030a52456_amd64",
                  "product_id": "quay/quay-container-security-operator-bundle@sha256:e94a181d8eee7fba81d293c70a470920ee02b6b2f8f5f368b7445cb030a52456_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256:e94a181d8eee7fba81d293c70a470920ee02b6b2f8f5f368b7445cb030a52456?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.9.12-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-rhel8@sha256:9fcfd2de9adadf3d3a983b0051d2a0043bde78cbe18cea36c10198d61a9708e8_amd64",
                "product": {
                  "name": "quay/quay-container-security-operator-rhel8@sha256:9fcfd2de9adadf3d3a983b0051d2a0043bde78cbe18cea36c10198d61a9708e8_amd64",
                  "product_id": "quay/quay-container-security-operator-rhel8@sha256:9fcfd2de9adadf3d3a983b0051d2a0043bde78cbe18cea36c10198d61a9708e8_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:9fcfd2de9adadf3d3a983b0051d2a0043bde78cbe18cea36c10198d61a9708e8?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.9.12-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-bundle@sha256:bc579e916a49be8a4faeae6aaa2a6b7f127c4cc1ee8e5d51c73a645969bbbd0f_amd64",
                "product": {
                  "name": "quay/quay-operator-bundle@sha256:bc579e916a49be8a4faeae6aaa2a6b7f127c4cc1ee8e5d51c73a645969bbbd0f_amd64",
                  "product_id": "quay/quay-operator-bundle@sha256:bc579e916a49be8a4faeae6aaa2a6b7f127c4cc1ee8e5d51c73a645969bbbd0f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256:bc579e916a49be8a4faeae6aaa2a6b7f127c4cc1ee8e5d51c73a645969bbbd0f?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.9.12-6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-rhel8@sha256:3baee927a5c71de6824979ec457a388fbfecdcc8c0cbe2f1ceb0e083bcb8a248_amd64",
                "product": {
                  "name": "quay/quay-operator-rhel8@sha256:3baee927a5c71de6824979ec457a388fbfecdcc8c0cbe2f1ceb0e083bcb8a248_amd64",
                  "product_id": "quay/quay-operator-rhel8@sha256:3baee927a5c71de6824979ec457a388fbfecdcc8c0cbe2f1ceb0e083bcb8a248_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256:3baee927a5c71de6824979ec457a388fbfecdcc8c0cbe2f1ceb0e083bcb8a248?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.9.12-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-rhel8@sha256:b86c95b701c8725673d785ef5aa514aa9b9b0c67ac5c3ff5d1b15541e0196a19_amd64",
                "product": {
                  "name": "quay/quay-rhel8@sha256:b86c95b701c8725673d785ef5aa514aa9b9b0c67ac5c3ff5d1b15541e0196a19_amd64",
                  "product_id": "quay/quay-rhel8@sha256:b86c95b701c8725673d785ef5aa514aa9b9b0c67ac5c3ff5d1b15541e0196a19_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256:b86c95b701c8725673d785ef5aa514aa9b9b0c67ac5c3ff5d1b15541e0196a19?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.9.12-7"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/clair-rhel8@sha256:c6ddb026071df0c5e2ed254f1dd59754282425f62bbb0108ecef79b278693c5c_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:c6ddb026071df0c5e2ed254f1dd59754282425f62bbb0108ecef79b278693c5c_amd64"
        },
        "product_reference": "quay/clair-rhel8@sha256:c6ddb026071df0c5e2ed254f1dd59754282425f62bbb0108ecef79b278693c5c_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-bundle@sha256:ab6e96abc329c5f72fe1b0d8f58f12318cd6a839f3cdc9d2ee67e62d73230932_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ab6e96abc329c5f72fe1b0d8f58f12318cd6a839f3cdc9d2ee67e62d73230932_amd64"
        },
        "product_reference": "quay/quay-bridge-operator-bundle@sha256:ab6e96abc329c5f72fe1b0d8f58f12318cd6a839f3cdc9d2ee67e62d73230932_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-rhel8@sha256:fbe4a163a7ee8275375fb4c03fdb416bf7f71bb3e80db8e60f21e54d9e505ff0_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fbe4a163a7ee8275375fb4c03fdb416bf7f71bb3e80db8e60f21e54d9e505ff0_amd64"
        },
        "product_reference": "quay/quay-bridge-operator-rhel8@sha256:fbe4a163a7ee8275375fb4c03fdb416bf7f71bb3e80db8e60f21e54d9e505ff0_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:abafc0e59f6668214728f1d11d39f207a50e32285d34ec42be360b9958ef9df2_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:abafc0e59f6668214728f1d11d39f207a50e32285d34ec42be360b9958ef9df2_amd64"
        },
        "product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:abafc0e59f6668214728f1d11d39f207a50e32285d34ec42be360b9958ef9df2_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-rhel8@sha256:937c11c2809a12b2609d3869d843a6735bbc1b1f7ba02e999682ad695eff8a88_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:937c11c2809a12b2609d3869d843a6735bbc1b1f7ba02e999682ad695eff8a88_amd64"
        },
        "product_reference": "quay/quay-builder-rhel8@sha256:937c11c2809a12b2609d3869d843a6735bbc1b1f7ba02e999682ad695eff8a88_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-bundle@sha256:e94a181d8eee7fba81d293c70a470920ee02b6b2f8f5f368b7445cb030a52456_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e94a181d8eee7fba81d293c70a470920ee02b6b2f8f5f368b7445cb030a52456_amd64"
        },
        "product_reference": "quay/quay-container-security-operator-bundle@sha256:e94a181d8eee7fba81d293c70a470920ee02b6b2f8f5f368b7445cb030a52456_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-rhel8@sha256:9fcfd2de9adadf3d3a983b0051d2a0043bde78cbe18cea36c10198d61a9708e8_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9fcfd2de9adadf3d3a983b0051d2a0043bde78cbe18cea36c10198d61a9708e8_amd64"
        },
        "product_reference": "quay/quay-container-security-operator-rhel8@sha256:9fcfd2de9adadf3d3a983b0051d2a0043bde78cbe18cea36c10198d61a9708e8_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-bundle@sha256:bc579e916a49be8a4faeae6aaa2a6b7f127c4cc1ee8e5d51c73a645969bbbd0f_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:bc579e916a49be8a4faeae6aaa2a6b7f127c4cc1ee8e5d51c73a645969bbbd0f_amd64"
        },
        "product_reference": "quay/quay-operator-bundle@sha256:bc579e916a49be8a4faeae6aaa2a6b7f127c4cc1ee8e5d51c73a645969bbbd0f_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-rhel8@sha256:3baee927a5c71de6824979ec457a388fbfecdcc8c0cbe2f1ceb0e083bcb8a248_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:3baee927a5c71de6824979ec457a388fbfecdcc8c0cbe2f1ceb0e083bcb8a248_amd64"
        },
        "product_reference": "quay/quay-operator-rhel8@sha256:3baee927a5c71de6824979ec457a388fbfecdcc8c0cbe2f1ceb0e083bcb8a248_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-rhel8@sha256:b86c95b701c8725673d785ef5aa514aa9b9b0c67ac5c3ff5d1b15541e0196a19_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:b86c95b701c8725673d785ef5aa514aa9b9b0c67ac5c3ff5d1b15541e0196a19_amd64"
        },
        "product_reference": "quay/quay-rhel8@sha256:b86c95b701c8725673d785ef5aa514aa9b9b0c67ac5c3ff5d1b15541e0196a19_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-21605",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2025-04-23T16:01:41.763906+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2361883"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Redis server. This flaw allows an unauthenticated client to cause an unlimited growth of output buffers until the server runs out of memory or is killed. By default, the Redis configuration does not limit the output buffer of normal clients (see client-output-buffer-limit). Therefore, the output buffer can grow unlimitedly over time. As a result, the service is exhausted, and the memory is unavailable.\n\nWhen password authentication is enabled on the Redis server but no password is provided, the client can still cause the output buffer to grow from \"NOAUTH\" responses until the system runs out of memory.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "redis: Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-Quay-3:quay/clair-rhel8@sha256:c6ddb026071df0c5e2ed254f1dd59754282425f62bbb0108ecef79b278693c5c_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ab6e96abc329c5f72fe1b0d8f58f12318cd6a839f3cdc9d2ee67e62d73230932_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fbe4a163a7ee8275375fb4c03fdb416bf7f71bb3e80db8e60f21e54d9e505ff0_amd64",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:abafc0e59f6668214728f1d11d39f207a50e32285d34ec42be360b9958ef9df2_amd64",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:937c11c2809a12b2609d3869d843a6735bbc1b1f7ba02e999682ad695eff8a88_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e94a181d8eee7fba81d293c70a470920ee02b6b2f8f5f368b7445cb030a52456_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9fcfd2de9adadf3d3a983b0051d2a0043bde78cbe18cea36c10198d61a9708e8_amd64",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:bc579e916a49be8a4faeae6aaa2a6b7f127c4cc1ee8e5d51c73a645969bbbd0f_amd64",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:3baee927a5c71de6824979ec457a388fbfecdcc8c0cbe2f1ceb0e083bcb8a248_amd64",
          "8Base-Quay-3:quay/quay-rhel8@sha256:b86c95b701c8725673d785ef5aa514aa9b9b0c67ac5c3ff5d1b15541e0196a19_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-21605"
        },
        {
          "category": "external",
          "summary": "RHBZ#2361883",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2361883"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-21605",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-21605"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-21605",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-21605"
        },
        {
          "category": "external",
          "summary": "https://github.com/redis/redis/releases/tag/7.4.3",
          "url": "https://github.com/redis/redis/releases/tag/7.4.3"
        },
        {
          "category": "external",
          "summary": "https://github.com/redis/redis/security/advisories/GHSA-r67f-p999-2gff",
          "url": "https://github.com/redis/redis/security/advisories/GHSA-r67f-p999-2gff"
        }
      ],
      "release_date": "2025-04-23T15:38:11.042000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-06-17T17:46:03+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:c6ddb026071df0c5e2ed254f1dd59754282425f62bbb0108ecef79b278693c5c_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ab6e96abc329c5f72fe1b0d8f58f12318cd6a839f3cdc9d2ee67e62d73230932_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fbe4a163a7ee8275375fb4c03fdb416bf7f71bb3e80db8e60f21e54d9e505ff0_amd64",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:abafc0e59f6668214728f1d11d39f207a50e32285d34ec42be360b9958ef9df2_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:937c11c2809a12b2609d3869d843a6735bbc1b1f7ba02e999682ad695eff8a88_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e94a181d8eee7fba81d293c70a470920ee02b6b2f8f5f368b7445cb030a52456_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9fcfd2de9adadf3d3a983b0051d2a0043bde78cbe18cea36c10198d61a9708e8_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:bc579e916a49be8a4faeae6aaa2a6b7f127c4cc1ee8e5d51c73a645969bbbd0f_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:3baee927a5c71de6824979ec457a388fbfecdcc8c0cbe2f1ceb0e083bcb8a248_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:b86c95b701c8725673d785ef5aa514aa9b9b0c67ac5c3ff5d1b15541e0196a19_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2025:8213"
        },
        {
          "category": "workaround",
          "details": "A workaround to mitigate this problem without patching the redis-server executable is to block access to prevent unauthenticated users from connecting to Redis. This can be done in the following different ways:\n\n- Using network access control tools like firewalls, iptables, security groups, etc.\n- Enabling TLS and requiring users to authenticate using client side certificates.",
          "product_ids": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:c6ddb026071df0c5e2ed254f1dd59754282425f62bbb0108ecef79b278693c5c_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ab6e96abc329c5f72fe1b0d8f58f12318cd6a839f3cdc9d2ee67e62d73230932_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fbe4a163a7ee8275375fb4c03fdb416bf7f71bb3e80db8e60f21e54d9e505ff0_amd64",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:abafc0e59f6668214728f1d11d39f207a50e32285d34ec42be360b9958ef9df2_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:937c11c2809a12b2609d3869d843a6735bbc1b1f7ba02e999682ad695eff8a88_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e94a181d8eee7fba81d293c70a470920ee02b6b2f8f5f368b7445cb030a52456_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9fcfd2de9adadf3d3a983b0051d2a0043bde78cbe18cea36c10198d61a9708e8_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:bc579e916a49be8a4faeae6aaa2a6b7f127c4cc1ee8e5d51c73a645969bbbd0f_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:3baee927a5c71de6824979ec457a388fbfecdcc8c0cbe2f1ceb0e083bcb8a248_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:b86c95b701c8725673d785ef5aa514aa9b9b0c67ac5c3ff5d1b15541e0196a19_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:c6ddb026071df0c5e2ed254f1dd59754282425f62bbb0108ecef79b278693c5c_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ab6e96abc329c5f72fe1b0d8f58f12318cd6a839f3cdc9d2ee67e62d73230932_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fbe4a163a7ee8275375fb4c03fdb416bf7f71bb3e80db8e60f21e54d9e505ff0_amd64",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:abafc0e59f6668214728f1d11d39f207a50e32285d34ec42be360b9958ef9df2_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:937c11c2809a12b2609d3869d843a6735bbc1b1f7ba02e999682ad695eff8a88_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e94a181d8eee7fba81d293c70a470920ee02b6b2f8f5f368b7445cb030a52456_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9fcfd2de9adadf3d3a983b0051d2a0043bde78cbe18cea36c10198d61a9708e8_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:bc579e916a49be8a4faeae6aaa2a6b7f127c4cc1ee8e5d51c73a645969bbbd0f_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:3baee927a5c71de6824979ec457a388fbfecdcc8c0cbe2f1ceb0e083bcb8a248_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:b86c95b701c8725673d785ef5aa514aa9b9b0c67ac5c3ff5d1b15541e0196a19_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "redis: Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client"
    },
    {
      "cve": "CVE-2025-27144",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2025-02-24T23:00:42.448432+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2347423"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GO-JOSE. In affected versions, when parsing compact JWS or JWE input, Go JOSE could use excessive memory. The code uses strings.Split(token, \".\") to split JWT tokens, which is vulnerable to excessive memory consumption when processing maliciously crafted tokens with a large number of `.` characters. This issue could be exploied by sending numerous malformed tokens, leading to memory exhaustion and a Denial of Service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "go-jose: Go JOSE\u0027s Parsing Vulnerable to Denial of Service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A moderate-impact denial of service flaw was found in Go JOSE, the Go implementation of the JSON Object Signing and Encryption (JOSE) standards, which is shipped in a number of Red Hat offerings including Red Hat OpenShift and related container-based products. When parsing compact JWS or JWE input, Go JOSE used strings.Split(token, \".\") to split tokens, which can consume excessive memory when processing maliciously crafted tokens containing a large number of \".\" characters. A remote attacker with no privileges or required user interaction could submit numerous malformed tokens to an application that passes attacker-controlled input to Go JOSE, causing memory exhaustion and a denial of service that affects only availability. Red Hat rates this issue as moderate impact, consistent with the upstream severity assessment. Fixes are being pursued by the affected product components; some components were determined not to be affected because the vulnerable code is not present or is not in an execute path.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-Quay-3:quay/clair-rhel8@sha256:c6ddb026071df0c5e2ed254f1dd59754282425f62bbb0108ecef79b278693c5c_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ab6e96abc329c5f72fe1b0d8f58f12318cd6a839f3cdc9d2ee67e62d73230932_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fbe4a163a7ee8275375fb4c03fdb416bf7f71bb3e80db8e60f21e54d9e505ff0_amd64",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:abafc0e59f6668214728f1d11d39f207a50e32285d34ec42be360b9958ef9df2_amd64",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:937c11c2809a12b2609d3869d843a6735bbc1b1f7ba02e999682ad695eff8a88_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e94a181d8eee7fba81d293c70a470920ee02b6b2f8f5f368b7445cb030a52456_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9fcfd2de9adadf3d3a983b0051d2a0043bde78cbe18cea36c10198d61a9708e8_amd64",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:bc579e916a49be8a4faeae6aaa2a6b7f127c4cc1ee8e5d51c73a645969bbbd0f_amd64",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:3baee927a5c71de6824979ec457a388fbfecdcc8c0cbe2f1ceb0e083bcb8a248_amd64",
          "8Base-Quay-3:quay/quay-rhel8@sha256:b86c95b701c8725673d785ef5aa514aa9b9b0c67ac5c3ff5d1b15541e0196a19_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-27144"
        },
        {
          "category": "external",
          "summary": "RHBZ#2347423",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2347423"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-27144",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-27144"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-27144",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27144"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-jose/go-jose/commit/99b346cec4e86d102284642c5dcbe9bb0cacfc22",
          "url": "https://github.com/go-jose/go-jose/commit/99b346cec4e86d102284642c5dcbe9bb0cacfc22"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-jose/go-jose/releases/tag/v4.0.5",
          "url": "https://github.com/go-jose/go-jose/releases/tag/v4.0.5"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-c6gw-w398-hv78",
          "url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-c6gw-w398-hv78"
        }
      ],
      "release_date": "2025-02-24T22:22:22.863000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-06-17T17:46:03+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:c6ddb026071df0c5e2ed254f1dd59754282425f62bbb0108ecef79b278693c5c_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ab6e96abc329c5f72fe1b0d8f58f12318cd6a839f3cdc9d2ee67e62d73230932_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fbe4a163a7ee8275375fb4c03fdb416bf7f71bb3e80db8e60f21e54d9e505ff0_amd64",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:abafc0e59f6668214728f1d11d39f207a50e32285d34ec42be360b9958ef9df2_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:937c11c2809a12b2609d3869d843a6735bbc1b1f7ba02e999682ad695eff8a88_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e94a181d8eee7fba81d293c70a470920ee02b6b2f8f5f368b7445cb030a52456_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9fcfd2de9adadf3d3a983b0051d2a0043bde78cbe18cea36c10198d61a9708e8_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:bc579e916a49be8a4faeae6aaa2a6b7f127c4cc1ee8e5d51c73a645969bbbd0f_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:3baee927a5c71de6824979ec457a388fbfecdcc8c0cbe2f1ceb0e083bcb8a248_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:b86c95b701c8725673d785ef5aa514aa9b9b0c67ac5c3ff5d1b15541e0196a19_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2025:8213"
        },
        {
          "category": "workaround",
          "details": "As a workaround, applications can pre-validate that payloads being passed to Go JOSE do not contain an excessive number of `.` characters.",
          "product_ids": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:c6ddb026071df0c5e2ed254f1dd59754282425f62bbb0108ecef79b278693c5c_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ab6e96abc329c5f72fe1b0d8f58f12318cd6a839f3cdc9d2ee67e62d73230932_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fbe4a163a7ee8275375fb4c03fdb416bf7f71bb3e80db8e60f21e54d9e505ff0_amd64",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:abafc0e59f6668214728f1d11d39f207a50e32285d34ec42be360b9958ef9df2_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:937c11c2809a12b2609d3869d843a6735bbc1b1f7ba02e999682ad695eff8a88_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e94a181d8eee7fba81d293c70a470920ee02b6b2f8f5f368b7445cb030a52456_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9fcfd2de9adadf3d3a983b0051d2a0043bde78cbe18cea36c10198d61a9708e8_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:bc579e916a49be8a4faeae6aaa2a6b7f127c4cc1ee8e5d51c73a645969bbbd0f_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:3baee927a5c71de6824979ec457a388fbfecdcc8c0cbe2f1ceb0e083bcb8a248_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:b86c95b701c8725673d785ef5aa514aa9b9b0c67ac5c3ff5d1b15541e0196a19_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:c6ddb026071df0c5e2ed254f1dd59754282425f62bbb0108ecef79b278693c5c_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ab6e96abc329c5f72fe1b0d8f58f12318cd6a839f3cdc9d2ee67e62d73230932_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:fbe4a163a7ee8275375fb4c03fdb416bf7f71bb3e80db8e60f21e54d9e505ff0_amd64",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:abafc0e59f6668214728f1d11d39f207a50e32285d34ec42be360b9958ef9df2_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:937c11c2809a12b2609d3869d843a6735bbc1b1f7ba02e999682ad695eff8a88_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:e94a181d8eee7fba81d293c70a470920ee02b6b2f8f5f368b7445cb030a52456_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:9fcfd2de9adadf3d3a983b0051d2a0043bde78cbe18cea36c10198d61a9708e8_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:bc579e916a49be8a4faeae6aaa2a6b7f127c4cc1ee8e5d51c73a645969bbbd0f_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:3baee927a5c71de6824979ec457a388fbfecdcc8c0cbe2f1ceb0e083bcb8a248_amd64",
            "8Base-Quay-3:quay/quay-rhel8@sha256:b86c95b701c8725673d785ef5aa514aa9b9b0c67ac5c3ff5d1b15541e0196a19_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "go-jose: Go JOSE\u0027s Parsing Vulnerable to Denial of Service"
    }
  ]
}

CVE-2025-21605 (GCVE-0-2025-21605)

Vulnerability from cvelistv5 – Published: 2025-04-23 15:38 – Updated: 2026-02-10 17:06

Title

Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client

Summary

Redis is an open source, in-memory database that persists on disk. In versions starting at 2.6 and prior to 7.4.3, An unauthenticated client can cause unlimited growth of output buffers, until the server runs out of memory or is killed. By default, the Redis configuration does not limit the output buffer of normal clients (see client-output-buffer-limit). Therefore, the output buffer can grow unlimitedly over time. As a result, the service is exhausted and the memory is unavailable. When password authentication is enabled on the Redis server, but no password is provided, the client can still cause the output buffer to grow from "NOAUTH" responses until the system will run out of memory. This issue has been patched in version 7.4.3. An additional workaround to mitigate this problem without patching the redis-server executable is to block access to prevent unauthenticated users from connecting to Redis. This can be done in different ways. Either using network access control tools like firewalls, iptables, security groups, etc, or enabling TLS and requiring users to authenticate using client side certificates.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-04-23 16:11 UTC

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 8043 records in the last 180 days details

References

6 references

URL	Tags
https://github.com/redis/redis/security/advisorie…	x_refsource_CONFIRM
https://github.com/redis/redis/releases/tag/7.4.3	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2025…
https://github.com/valkey-io/valkey/releases/tag/8.1.1
https://www.vicarius.io/vsociety/posts/cve-2025-2…
https://www.vicarius.io/vsociety/posts/cve-2025-2…

Impacted products

1 product

Vendor	Product	Version
redis	redis	Affected: >= 2.6, < 7.4.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-21605",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-23T16:11:06.562685Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-23T16:11:18.164Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2026-02-10T17:06:50.695Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00014.html"
          },
          {
            "url": "https://github.com/valkey-io/valkey/releases/tag/8.1.1"
          },
          {
            "url": "https://www.vicarius.io/vsociety/posts/cve-2025-21605-detection-script-memory-exhaustion-vulnerability-in-redis-database"
          },
          {
            "url": "https://www.vicarius.io/vsociety/posts/cve-2025-21605-mitigation-script-memory-exhaustion-vulnerability-in-redis-database"
          }
        ],
        "title": "CVE Program Container",
        "x_generator": {
          "engine": "ADPogram 0.0.1"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "redis",
          "vendor": "redis",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 2.6, \u003c 7.4.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Redis is an open source, in-memory database that persists on disk. In versions starting at 2.6 and prior to 7.4.3, An unauthenticated client can cause unlimited growth of output buffers, until the server runs out of memory or is killed. By default, the Redis configuration does not limit the output buffer of normal clients (see client-output-buffer-limit). Therefore, the output buffer can grow unlimitedly over time. As a result, the service is exhausted and the memory is unavailable. When password authentication is enabled on the Redis server, but no password is provided, the client can still cause the output buffer to grow from \"NOAUTH\" responses until the system will run out of memory. This issue has been patched in version 7.4.3. An additional workaround to mitigate this problem without patching the redis-server executable is to block access to prevent unauthenticated users from connecting to Redis. This can be done in different ways. Either using network access control tools like firewalls, iptables, security groups, etc, or enabling TLS and requiring users to authenticate using client side certificates."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-04-23T15:38:11.042Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/redis/redis/security/advisories/GHSA-r67f-p999-2gff",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/redis/redis/security/advisories/GHSA-r67f-p999-2gff"
        },
        {
          "name": "https://github.com/redis/redis/releases/tag/7.4.3",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/redis/redis/releases/tag/7.4.3"
        }
      ],
      "source": {
        "advisory": "GHSA-r67f-p999-2gff",
        "discovery": "UNKNOWN"
      },
      "title": "Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2025-21605",
    "datePublished": "2025-04-23T15:38:11.042Z",
    "dateReserved": "2024-12-29T03:00:24.712Z",
    "dateUpdated": "2026-02-10T17:06:50.695Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-27144 (GCVE-0-2025-27144)

Vulnerability from cvelistv5 – Published: 2025-02-24 22:22 – Updated: 2025-02-25 14:27

Title

Go JOSE's Parsing Vulnerable to Denial of Service

Summary

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. In versions on the 4.x branch prior to version 4.0.5, when parsing compact JWS or JWE input, Go JOSE could use excessive memory. The code used strings.Split(token, ".") to split JWT tokens, which is vulnerable to excessive memory consumption when processing maliciously crafted tokens with a large number of `.` characters. An attacker could exploit this by sending numerous malformed tokens, leading to memory exhaustion and a Denial of Service. Version 4.0.5 fixes this issue. As a workaround, applications could pre-validate that payloads passed to Go JOSE do not contain an excessive number of `.` characters.

Severity

6.6 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-02-25 14:26 UTC

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 8043 records in the last 180 days details

References

3 references

URL	Tags
https://github.com/go-jose/go-jose/security/advis…	x_refsource_CONFIRM
https://github.com/go-jose/go-jose/commit/99b346c…	x_refsource_MISC
https://github.com/go-jose/go-jose/releases/tag/v4.0.5	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
go-jose	go-jose	Affected: >= 4.0.0, < 4.0.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-27144",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-25T14:26:42.682392Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-25T14:27:04.978Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "go-jose",
          "vendor": "go-jose",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 4.0.0, \u003c 4.0.5"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. In versions on the 4.x branch prior to version 4.0.5, when parsing compact JWS or JWE input, Go JOSE could use excessive memory. The code used strings.Split(token, \".\") to split JWT tokens, which is vulnerable to excessive memory consumption when processing maliciously crafted tokens with a large number of `.` characters.  An attacker could exploit this by sending numerous malformed tokens, leading to memory exhaustion and a Denial of Service. Version 4.0.5 fixes this issue. As a workaround, applications could pre-validate that payloads passed to Go JOSE do not contain an excessive number of `.` characters."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 6.6,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-02-24T22:22:22.863Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/go-jose/go-jose/security/advisories/GHSA-c6gw-w398-hv78",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-c6gw-w398-hv78"
        },
        {
          "name": "https://github.com/go-jose/go-jose/commit/99b346cec4e86d102284642c5dcbe9bb0cacfc22",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/go-jose/go-jose/commit/99b346cec4e86d102284642c5dcbe9bb0cacfc22"
        },
        {
          "name": "https://github.com/go-jose/go-jose/releases/tag/v4.0.5",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/go-jose/go-jose/releases/tag/v4.0.5"
        }
      ],
      "source": {
        "advisory": "GHSA-c6gw-w398-hv78",
        "discovery": "UNKNOWN"
      },
      "title": "Go JOSE\u0027s Parsing Vulnerable to Denial of Service"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2025-27144",
    "datePublished": "2025-02-24T22:22:22.863Z",
    "dateReserved": "2025-02-19T16:30:47.777Z",
    "dateUpdated": "2025-02-25T14:27:04.978Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHBA-2025:8213

CVE-2025-21605 (GCVE-0-2025-21605)

CVE-2025-27144 (GCVE-0-2025-27144)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour