VDB
RHSA-2025%3A23225
RHSA-2025%3A23225
PUBLISHED
CVSS 7.5 HIGH
Red Hat OpenShift Dev Spaces 3.25.0 has been released.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| registry.redhat.io/devspaces/machineexec | ||
| registry.redhat.io/devspaces/imagepuller | ||
| registry.redhat.io/devspaces/configbump | ||
| registry.redhat.io/devspaces/dashboard | ||
| registry.redhat.io/devspaces/server | ||
| registry.redhat.io/devspaces/code | ||
| registry.redhat.io/devspaces/pluginregistry | ||
| registry.redhat.io/devspaces/traefik | ||
| registry.redhat.io/devspaces/jetbrains | ||
| registry.redhat.io/devspaces/openvsx | ||
| Red Hat OpenShift Dev Spaces (RHOSDS) 3.25 | ||
| registry.redhat.io/devspaces/devspaces | ||
| registry.redhat.io/devspaces/udi |
Timeline
- Dec 15, 2025 CVE Published
- Apr 18, 2026 PoC Published
- Apr 22, 2026 Distribution Patch
- Apr 22, 2026 Distribution Patch
- Apr 22, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2025:23225 advisory
- https://access.redhat.com/documentation/en-us/red_hat_openshift_dev_spaces/3.25/html/administration_guide/installing-devspaces url
- https://access.redhat.com/security/cve/CVE-2024-4067 url
- https://access.redhat.com/security/cve/CVE-2025-55247 url
- https://access.redhat.com/security/cve/CVE-2025-55248 url
- https://access.redhat.com/security/cve/CVE-2025-55315 url
- https://access.redhat.com/security/cve/CVE-2025-55752 url
- https://access.redhat.com/security/cve/CVE-2025-61927 url
- https://access.redhat.com/security/cve/CVE-2025-66516 url
- https://access.redhat.com/security/updates/classification/ url
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23225.json advisory