VDB
RHSA-2025%3A8510
RHSA-2025%3A8510
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in the http-proxy-middleware package. Affected versions of this package are vulnerable to denial of service (DoS) due to an UnhandledPromiseRejection error thrown by micromatch. This flaw allows an attacker to kill the Node.js process and crash the server by requesting certain paths.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | rhmtc/openshift-migration-openvpn-rhel8@sha256:68aab51a9d9bf099124738d9e7506b357e0f194924f34dded268c2027e9e4dc5_amd64 as a component of 8Base-RHMTC-1.8 | rhmtc/openshift-migration-openvpn-rhel8@sha256:68aab51a9d9bf099124738d9e7506b357e0f194924f34dded268c2027e9e4dc5_amd64, rhmtc/openshift-migration-openvpn-rhel8@sha256:68aab51a9d9bf099124738d9e7506b357e0f194924f34dded268c2027e9e4dc5_amd64, * |
| Red Hat | rhmtc/openshift-migration-operator-bundle@sha256:6611752875c270468d29fc6ff63c6d66aaa2675c0e524937180ff8ee93215b4b_amd64 as a component of 8Base-RHMTC-1.8 | rhmtc/openshift-migration-operator-bundle@sha256:6611752875c270468d29fc6ff63c6d66aaa2675c0e524937180ff8ee93215b4b_amd64, rhmtc/openshift-migration-operator-bundle@sha256:6611752875c270468d29fc6ff63c6d66aaa2675c0e524937180ff8ee93215b4b_amd64, rhmtc/openshift-migration-operator-bundle@sha256:6611752875c270468d29fc6ff63c6d66aaa2675c0e524937180ff8ee93215b4b_amd64 |
| Red Hat | rhmtc/openshift-migration-must-gather-rhel8@sha256:e63f4262e1a95f5913a812437ec9bf25aa8903e8c41574b6f7b69b8f8bc850ad_amd64 as a component of 8Base-RHMTC-1.8 | rhmtc/openshift-migration-must-gather-rhel8@sha256:e63f4262e1a95f5913a812437ec9bf25aa8903e8c41574b6f7b69b8f8bc850ad_amd64, rhmtc/openshift-migration-must-gather-rhel8@sha256:e63f4262e1a95f5913a812437ec9bf25aa8903e8c41574b6f7b69b8f8bc850ad_amd64, rhmtc/openshift-migration-must-gather-rhel8@sha256:e63f4262e1a95f5913a812437ec9bf25aa8903e8c41574b6f7b69b8f8bc850ad_amd64 |
| Red Hat | rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:f64466725f6a76d47c191bbe50c7526add0774b04bccb9dabd8166c01e992123_amd64 as a component of 8Base-RHMTC-1.8 | rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:f64466725f6a76d47c191bbe50c7526add0774b04bccb9dabd8166c01e992123_amd64, rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:f64466725f6a76d47c191bbe50c7526add0774b04bccb9dabd8166c01e992123_amd64, * |
| Red Hat | rhmtc/openshift-migration-rhel8-operator@sha256:6761863f92e894c1c0b019d4a640bfc872c6dcebcf18ce1abbe83691cae45a1d_amd64 as a component of 8Base-RHMTC-1.8 | rhmtc/openshift-migration-rhel8-operator@sha256:6761863f92e894c1c0b019d4a640bfc872c6dcebcf18ce1abbe83691cae45a1d_amd64, rhmtc/openshift-migration-rhel8-operator@sha256:6761863f92e894c1c0b019d4a640bfc872c6dcebcf18ce1abbe83691cae45a1d_amd64, rhmtc/openshift-migration-rhel8-operator@sha256:6761863f92e894c1c0b019d4a640bfc872c6dcebcf18ce1abbe83691cae45a1d_amd64 |
| Red Hat | rhmtc/openshift-migration-ui-rhel8@sha256:596f8ae61f2bb56e19e5e03bf7d114ff0607a7f381d6177b3cc0df2cfdcf1e58_amd64 as a component of 8Base-RHMTC-1.8 | rhmtc/openshift-migration-ui-rhel8@sha256:596f8ae61f2bb56e19e5e03bf7d114ff0607a7f381d6177b3cc0df2cfdcf1e58_amd64, rhmtc/openshift-migration-ui-rhel8@sha256:596f8ae61f2bb56e19e5e03bf7d114ff0607a7f381d6177b3cc0df2cfdcf1e58_amd64, rhmtc/openshift-migration-ui-rhel8@sha256:596f8ae61f2bb56e19e5e03bf7d114ff0607a7f381d6177b3cc0df2cfdcf1e58_amd64 |
| Red Hat | rhmtc/openshift-migration-rhel8-operator@sha256:6761863f92e894c1c0b019d4a640bfc872c6dcebcf18ce1abbe83691cae45a1d_amd64 as a component of 8Base-RHMTC-1.8 | rhmtc/openshift-migration-rhel8-operator@sha256:6761863f92e894c1c0b019d4a640bfc872c6dcebcf18ce1abbe83691cae45a1d_amd64, *, * |
| Red Hat | rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:f64466725f6a76d47c191bbe50c7526add0774b04bccb9dabd8166c01e992123_amd64 as a component of 8Base-RHMTC-1.8 | *, *, * |
| Red Hat | rhmtc/openshift-migration-log-reader-rhel8@sha256:2b887879f51ba42555bc166e2b5e44265a8ecce87d35ffe698054bd8394c5923_amd64 as a component of 8Base-RHMTC-1.8 | rhmtc/openshift-migration-log-reader-rhel8@sha256:2b887879f51ba42555bc166e2b5e44265a8ecce87d35ffe698054bd8394c5923_amd64, *, rhmtc/openshift-migration-log-reader-rhel8@sha256:2b887879f51ba42555bc166e2b5e44265a8ecce87d35ffe698054bd8394c5923_amd64 |
| Red Hat | rhmtc/openshift-migration-controller-rhel8@sha256:0c83726f520790b68fba4926299c9a8327d2316d8d0aff472b64aad586a7a39a_amd64 as a component of 8Base-RHMTC-1.8 | rhmtc/openshift-migration-controller-rhel8@sha256:0c83726f520790b68fba4926299c9a8327d2316d8d0aff472b64aad586a7a39a_amd64, rhmtc/openshift-migration-controller-rhel8@sha256:0c83726f520790b68fba4926299c9a8327d2316d8d0aff472b64aad586a7a39a_amd64, * |
| Red Hat | rhmtc/openshift-migration-hook-runner-rhel8@sha256:e58aec84cb80cd57ef37038e83ca60113c8cb7998923806decd901355db06900_amd64 as a component of 8Base-RHMTC-1.8 | rhmtc/openshift-migration-hook-runner-rhel8@sha256:e58aec84cb80cd57ef37038e83ca60113c8cb7998923806decd901355db06900_amd64, rhmtc/openshift-migration-hook-runner-rhel8@sha256:e58aec84cb80cd57ef37038e83ca60113c8cb7998923806decd901355db06900_amd64, rhmtc/openshift-migration-hook-runner-rhel8@sha256:e58aec84cb80cd57ef37038e83ca60113c8cb7998923806decd901355db06900_amd64 |
| Red Hat | rhmtc/openshift-migration-ui-rhel8@sha256:596f8ae61f2bb56e19e5e03bf7d114ff0607a7f381d6177b3cc0df2cfdcf1e58_amd64 as a component of 8Base-RHMTC-1.8 | *, rhmtc/openshift-migration-ui-rhel8@sha256:596f8ae61f2bb56e19e5e03bf7d114ff0607a7f381d6177b3cc0df2cfdcf1e58_amd64, rhmtc/openshift-migration-ui-rhel8@sha256:596f8ae61f2bb56e19e5e03bf7d114ff0607a7f381d6177b3cc0df2cfdcf1e58_amd64 |
| Red Hat | rhmtc/openshift-migration-registry-rhel8@sha256:bedabe364c8eef1627a9eb6f96737448df680ab090cecfdcfe20af90dac5240d_amd64 as a component of 8Base-RHMTC-1.8 | rhmtc/openshift-migration-registry-rhel8@sha256:bedabe364c8eef1627a9eb6f96737448df680ab090cecfdcfe20af90dac5240d_amd64, rhmtc/openshift-migration-registry-rhel8@sha256:bedabe364c8eef1627a9eb6f96737448df680ab090cecfdcfe20af90dac5240d_amd64, rhmtc/openshift-migration-registry-rhel8@sha256:bedabe364c8eef1627a9eb6f96737448df680ab090cecfdcfe20af90dac5240d_amd64 |
| Red Hat | rhmtc/openshift-migration-registry-rhel8@sha256:bedabe364c8eef1627a9eb6f96737448df680ab090cecfdcfe20af90dac5240d_amd64 as a component of 8Base-RHMTC-1.8 | rhmtc/openshift-migration-registry-rhel8@sha256:bedabe364c8eef1627a9eb6f96737448df680ab090cecfdcfe20af90dac5240d_amd64, rhmtc/openshift-migration-registry-rhel8@sha256:bedabe364c8eef1627a9eb6f96737448df680ab090cecfdcfe20af90dac5240d_amd64, rhmtc/openshift-migration-registry-rhel8@sha256:bedabe364c8eef1627a9eb6f96737448df680ab090cecfdcfe20af90dac5240d_amd64 |
| Red Hat | rhmtc/openshift-migration-controller-rhel8@sha256:0c83726f520790b68fba4926299c9a8327d2316d8d0aff472b64aad586a7a39a_amd64 as a component of 8Base-RHMTC-1.8 | rhmtc/openshift-migration-controller-rhel8@sha256:0c83726f520790b68fba4926299c9a8327d2316d8d0aff472b64aad586a7a39a_amd64, rhmtc/openshift-migration-controller-rhel8@sha256:0c83726f520790b68fba4926299c9a8327d2316d8d0aff472b64aad586a7a39a_amd64, rhmtc/openshift-migration-controller-rhel8@sha256:0c83726f520790b68fba4926299c9a8327d2316d8d0aff472b64aad586a7a39a_amd64 |
| Red Hat | rhmtc/openshift-migration-log-reader-rhel8@sha256:2b887879f51ba42555bc166e2b5e44265a8ecce87d35ffe698054bd8394c5923_amd64 as a component of 8Base-RHMTC-1.8 | rhmtc/openshift-migration-log-reader-rhel8@sha256:2b887879f51ba42555bc166e2b5e44265a8ecce87d35ffe698054bd8394c5923_amd64, *, * |
| Red Hat | rhmtc/openshift-migration-openvpn-rhel8@sha256:68aab51a9d9bf099124738d9e7506b357e0f194924f34dded268c2027e9e4dc5_amd64 as a component of 8Base-RHMTC-1.8 | *, rhmtc/openshift-migration-openvpn-rhel8@sha256:68aab51a9d9bf099124738d9e7506b357e0f194924f34dded268c2027e9e4dc5_amd64, rhmtc/openshift-migration-openvpn-rhel8@sha256:68aab51a9d9bf099124738d9e7506b357e0f194924f34dded268c2027e9e4dc5_amd64 |
| Red Hat | rhmtc/openshift-migration-must-gather-rhel8@sha256:e63f4262e1a95f5913a812437ec9bf25aa8903e8c41574b6f7b69b8f8bc850ad_amd64 as a component of 8Base-RHMTC-1.8 | *, *, rhmtc/openshift-migration-must-gather-rhel8@sha256:e63f4262e1a95f5913a812437ec9bf25aa8903e8c41574b6f7b69b8f8bc850ad_amd64 |
| Red Hat | rhmtc/openshift-migration-operator-bundle@sha256:6611752875c270468d29fc6ff63c6d66aaa2675c0e524937180ff8ee93215b4b_amd64 as a component of 8Base-RHMTC-1.8 | rhmtc/openshift-migration-operator-bundle@sha256:6611752875c270468d29fc6ff63c6d66aaa2675c0e524937180ff8ee93215b4b_amd64, rhmtc/openshift-migration-operator-bundle@sha256:6611752875c270468d29fc6ff63c6d66aaa2675c0e524937180ff8ee93215b4b_amd64, rhmtc/openshift-migration-operator-bundle@sha256:6611752875c270468d29fc6ff63c6d66aaa2675c0e524937180ff8ee93215b4b_amd64 |
| Red Hat | rhmtc/openshift-migration-hook-runner-rhel8@sha256:e58aec84cb80cd57ef37038e83ca60113c8cb7998923806decd901355db06900_amd64 as a component of 8Base-RHMTC-1.8 | rhmtc/openshift-migration-hook-runner-rhel8@sha256:e58aec84cb80cd57ef37038e83ca60113c8cb7998923806decd901355db06900_amd64, rhmtc/openshift-migration-hook-runner-rhel8@sha256:e58aec84cb80cd57ef37038e83ca60113c8cb7998923806decd901355db06900_amd64, rhmtc/openshift-migration-hook-runner-rhel8@sha256:e58aec84cb80cd57ef37038e83ca60113c8cb7998923806decd901355db06900_amd64 |
…and 2 more
Timeline
- Jun 4, 2025 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Jul 13, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2025:8510 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2319884 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2324550 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2333122 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2348366 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2354195 issue
- https://issues.redhat.com/browse/MIG-1733 advisory
- https://issues.redhat.com/browse/MIG-1735 advisory
- https://issues.redhat.com/browse/MIG-1738 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8510.json advisory
- https://access.redhat.com/security/cve/CVE-2024-21536 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-21536 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-21536 advisory
- https://gist.github.com/mhassan1/28be67266d82a53708ed59ce5dc3c94a advisory
- https://github.com/chimurai/http-proxy-middleware/commit/0b4274e8cc9e9a2c5a06f35fbf456ccfcebc55a5 advisory
- https://github.com/chimurai/http-proxy-middleware/commit/788b21e4aff38332d6319557d4a5b1b13b1f9a22 advisory
- https://security.snyk.io/vuln/SNYK-JS-HTTPPROXYMIDDLEWARE-8229906 advisory
- https://access.redhat.com/security/cve/CVE-2024-21538 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-21538 advisory
…and 24 more