Medium WID-SEC-2025-2251 5 CVEs

Red Hat OpenShift GitOps: Mehrere Schwachstellen

Published Oct 9, 2025 · Updated Nov 2, 2026 · Revision 10 · de-DE

Vendor: Red Hat Product: Enterprise Linux Product: OpenShift GitOps Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift GitOps ausnutzen, um Daten zu manipulieren, falsche Informationen darzustellen, oder einen Denial of Service zu verursachen.

Product

Red Hat OpenShift GitOps ist eine Lösung, die Git als Single Source of Truth für die deklarative Infrastruktur- und Anwendungsbereitstellung in OpenShift-Clustern nutzt.

Vulnerabilities 5

High 7.5

CVE-2025-22874

Usage of ExtKeyUsageAny disables policy validation in crypto/x509

Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which are rather uncommon.

Go standard library crypto/x509 golang go Debian Ubuntu Azure Linux Alpine Wolfi Go

Jun 11, 2025
High 7.5

CVE-2025-59531

Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions 1.2.0 through 1.8.7, 2.0.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1, 3.1.7 and 3.0.18 are vulnerable to malicious API requests which can crash the API server and cause …

argoproj Argo CD github.com/argoproj/argo-cd github.com/argoproj/argo-cd/v2 Go

Oct 1, 2025
High 7.5

CVE-2025-59537

argo-cd is vulnerable to unauthenticated DoS attack via malformed Gogs webhook payload

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions 1.2.0 through 1.8.7, 2.0.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1, 3.1.7 and 3.0.18 are vulnerable to malicious API requests which can crash the API server and cause …

argoproj Argo CD github.com/argoproj/argo-cd github.com/argoproj/argo-cd/v2 Go

Oct 1, 2025
High 7.5

CVE-2025-59538 EPSS 11%

Argo CD is Vulnerable to Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. For versions 2.9.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1, 3.1.6 and 3.0.17, when the webhook.azuredevops.username and webhook.azuredevops.password are not set in the default …

argoproj Argo CD github.com/argoproj/argo-cd github.com/argoproj/argo-cd/v2 Go

Oct 1, 2025
High 7.0

CVE-2025-47907

Incorrect results returned from Rows.Scan in database/sql

Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that…

Go standard library database/sql katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go

Aug 7, 2025

Revision history

2026-11-02 #10
Neue Updates von Red Hat aufgenommen
2026-03-30 #9
Neue Updates von Red Hat aufgenommen
2026-03-24 #8
Neue Updates von Red Hat aufgenommen
2026-02-05 #7
Neue Updates von Red Hat aufgenommen
2025-11-24 #6
Neue Updates von Red Hat aufgenommen
2025-11-12 #5
Neue Updates von Red Hat aufgenommen
2025-11-11 #4
Neue Updates von Red Hat aufgenommen
2025-11-09 #3
Neue Updates von Red Hat aufgenommen
2025-10-15 #2
Neue Updates von Red Hat aufgenommen
2025-10-09 #1
Initiale Fassung

References

Red Hat Security Advisory vom 2025-10-09
https://access.redhat.com/errata/RHSA-2025:17731
Red Hat Security Advisory RHSA-2025:18093 vom 2025-10-15
https://access.redhat.com/errata/RHSA-2025:18093
Red Hat Security Advisory RHSA-2025:19961 vom 2025-11-10
https://access.redhat.com/errata/RHSA-2025:19961
Red Hat Security Advisory RHSA-2025:20983 vom 2025-11-11
https://access.redhat.com/errata/RHSA-2025:20983
Red Hat Security Advisory RHSA-2025:21132 vom 2025-11-12
https://access.redhat.com/errata/RHSA-2025:21132
Red Hat Security Advisory RHSA-2025:21148 vom 2025-11-25
https://access.redhat.com/errata/RHSA-2025:21148
Red Hat Security Advisory RHSA-2026:2155 vom 2026-02-05
https://access.redhat.com/errata/RHSA-2026:2155
Red Hat Security Advisory RHSA-2026:5633 vom 2026-03-24
https://access.redhat.com/errata/RHSA-2026:5633
Red Hat Security Advisory RHSA-2026:5645 vom 2026-03-24
https://access.redhat.com/errata/RHSA-2026:5645
Red Hat Security Advisory RHSA-2026:5636 vom 2026-03-24
https://access.redhat.com/errata/RHSA-2026:5636
Red Hat Security Advisory RHSA-2026:6226 vom 2026-03-31
https://access.redhat.com/errata/RHSA-2026:6226
Red Hat Security Advisory RHSA-2026:94074 vom 2026-11-02
https://access.redhat.com/errata/RHSA-2026:94074