RHBA-2025%3A0409 — Vulnetix

RHBA-2025%3A0409 PUBLISHED CVSS 7.5 HIGH

A flaw was found in golang.org/x/net/html. This flaw allows an attacker to craft input to the parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This issue can cause a denial of service.

Risk Scores

CVSS 3.1

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions
Red Hat	registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:a91c4931ef5111c555ec5cc8128c3148c94fe2983d2e4fa7babe843e9292b303_amd64 as a component of Red Hat Developer Hub (RHDH) 1.4	*
Red Hat	registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:d8268197ba0466643efb818fcad8f0fc29e32463f75b0f7f51d9ce75ec717572_amd64 as a component of Red Hat Developer Hub (RHDH) 1.4	*
Red Hat	registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:a91c4931ef5111c555ec5cc8128c3148c94fe2983d2e4fa7babe843e9292b303_amd64 as a component of Red Hat Developer Hub (RHDH) 1.4	registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:a91c4931ef5111c555ec5cc8128c3148c94fe2983d2e4fa7babe843e9292b303_amd64
Red Hat	registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e1e2fac9519bd480c9629f5a9cf69be0169715483b7e662eaac61a48b37eb60_amd64 as a component of Red Hat Developer Hub (RHDH) 1.4	registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e1e2fac9519bd480c9629f5a9cf69be0169715483b7e662eaac61a48b37eb60_amd64
Red Hat	registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:9e1e2fac9519bd480c9629f5a9cf69be0169715483b7e662eaac61a48b37eb60_amd64 as a component of Red Hat Developer Hub (RHDH) 1.4	*
Red Hat	registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:d8268197ba0466643efb818fcad8f0fc29e32463f75b0f7f51d9ce75ec717572_amd64 as a component of Red Hat Developer Hub (RHDH) 1.4	*

Timeline

Jan 20, 2025 CVE Published
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
May 15, 2026 CVE Updated

References

https://access.redhat.com/errata/RHBA-2025:0409 advisory
https://developers.redhat.com/rhdh/overview advisory
https://docs.redhat.com/en/documentation/red_hat_developer_hub advisory
https://catalog.redhat.com/search?gs&searchType=containers&q=rhdh advisory
https://access.redhat.com/security/cve/CVE-2024-45338 advisory
https://access.redhat.com/security/cve/CVE-2024-52798 advisory
https://access.redhat.com/security/cve/CVE-2024-55565 advisory
https://access.redhat.com/security/cve/CVE-2024-56201 advisory
https://access.redhat.com/security/cve/CVE-2024-56326 advisory
https://access.redhat.com/security/cve/CVE-2024-56334 advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_0409.json advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2333122 issue
https://www.cve.org/CVERecord?id=CVE-2024-45338 advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-45338 advisory
https://go.dev/cl/637536 advisory
https://go.dev/issue/70906 advisory
https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ advisory
https://pkg.go.dev/vuln/GO-2024-3333 advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2330689 issue
https://www.cve.org/CVERecord?id=CVE-2024-52798 advisory

…and 26 more

Open in Interactive Console →