Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-5889

15
FAUCET Score

CVE-2025-5889 is a problematic vulnerability affecting the expand function in juliangruber brace-expansion versions up to 1.1.11, 2.0.1, 3.0.0, and 4.0.0. This flaw, categorized as inefficient regular expression complexity (ReDoS), can be triggered remotely. While the attack complexity is high and exploitation is difficult, public exploit disclosure exists. The CVSS score is 3.1 LOW, indicating a low impact of a denial of service, and it is not currently in the KEV catalog. Community discussion and media coverage are minimal, and there are no known Metasploit, Nuclei, or ExploitDB modules. Upgrading to versions 1.1.12, 2.0.2, 3.0.1, or 4.0.1 is recommended to remediate this issue.

Impacted Technologies

VendorProductVersion(s)CPE
JuliangruberBrace-Expansion
1.1.0, 1.1.1, 1.1.10, 1.1.11, 1.1.2, 1.1.3, 1.1.4, 1.1.5, 1.1.6, 1.1.7, 1.1.8, 1.1.9, 2.0.0, 2.0.1, 3.0, 4.0CNA affected

CVSS Data

CVSS version used by this source: 4.0

1.3LOW

CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector
NETWORK
Attack Complexity
HIGH
Attack Requirements
NONE
Privileges Required
LOW
User Interaction
NONE
VS Confidentiality
NONE
VS Integrity
NONE
VS Availability
LOW
SS Confidentiality
NONE
SS Integrity
NONE
SS Availability
NONE
Exploit Maturity
PROOF_OF_CONCEPT
CvssVersion
4.0

Exploit Intelligence

EPSS Score
0.46%
Probability of exploitation in next 30 days
EPSS Percentile
37.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0046 is in the 12th percentile among its peer group of 1,638 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (203)

microsoftpatch availablevia msrc
Product: cbl2 nodejs18 18.20.3-9 on CBL Mariner 2.0Fixed in: 18.20.3-9
microsoftpatch availablevia msrc
Product: cbl2 nodejs18 18.20.3-8 on CBL Mariner 2.0Fixed in: 18.20.3-9
microsoftpatch availablevia msrc
Product: 20367-17086Fixed in: 18.20.3-9
microsoftpatch availablevia msrc
Product: 20056-17086Fixed in: 18.20.3-9
npmpatch availablevia ghsa
Product: brace-expansionFixed in: 1.1.12
npmpatch availablevia ghsa
Product: brace-expansionFixed in: 2.0.2
npmpatch availablevia ghsa
Product: brace-expansionFixed in: 3.0.1
npmpatch availablevia ghsa
Product: brace-expansionFixed in: 4.0.1
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/ocs-rhel9-operator:sha256:00cb6923e961942f4beabe19a6ad142dbff62929996728c664a1995fc76fcf8a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/odf-console-rhel9:sha256:0d8ff43ca27a8ca5017fc136f9708c743043b72479bced7ce7a91c1057d92339
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/odf-cosi-sidecar-rhel9:sha256:d48c4170807496eea6ebd3c101b3ebfdc6230fec6ede62c04235fb0acdc06a53
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/odf-csi-addons-rhel9-operator:sha256:adaaa62e21dcf01d6e7e3219d61f64b5973d2aaf8db3b574c04cc6d8636186b8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/odf-csi-addons-sidecar-rhel9:sha256:0e87484dee4724fc0bfc1a2edd4f60dd558aaa2a38c783c0f80b3c4a4a3ce8d6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/odf-multicluster-console-rhel9:sha256:d10840f73008b75bd8550baa67ce453e27ae44bfdb4515fe53752078d460edfb
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/odf-multicluster-rhel9-operator:sha256:e34c45895fd860c794c8000f092036fe65228bd362d9da06a08ed02af1d7d309
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/odf-must-gather-rhel9:sha256:70cc9a59178ea9d801fb8a06ac6bee6cf3b04ab6cefd9c66b52cb3cc88300f0e
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/odf-rhel9-operator:sha256:c790126755b9d5f81438217a6856ca43157ea08a2d53e106f130501ebc51c893
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/odr-rhel9-operator:sha256:ef73b23ba0c7a14113ad6e97159d645827c761c65ab20e9f9fd39fe6f62a9d0d
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/rook-ceph-rhel9-operator:sha256:70eeb29f70f8d78e702fad26d13875cd36bfcf6aea7d2b9415dded2b526a73ef
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/cephcsi-rhel9:sha256:78175febe7b181ade5054857d20b097797663c72cb17cbae4203958e8a351329
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/mcg-core-rhel9:sha256:8ed89037982928b39705d3554f51012c537bef9994e2895511a8a356d735fb2a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/mcg-rhel9-operator:sha256:342ec40b4be75a43a6dc9bd86bdd684ffad05c04e177a173273f1d892e2501dd
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/ocs-client-console-rhel9:sha256:2012c48688b519ce45f08e1392fd886400a1782ea4bf942e434b4281cebca64e
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/ocs-client-rhel9-operator:sha256:dba72b4adc377084e2fe0ea84c2849fb3101e5d3bb9bc3ee261df6391bd10da2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/ocs-metrics-exporter-rhel9:sha256:37cb9c23e27da0c54c36bd90bace10bc21406529568deb6436dfbb9bb686dfbb
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/ocs-rhel9-operator:sha256:6b47f30899b9eaef4a08de84be1c785a2d5e189914d270f3a50968238690ad8f
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/odf-cli-rhel9:sha256:b5be57abafaafc06cff6e269d29d87219427c45df48715378ea4a11174ee0775
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/odf-console-rhel9:sha256:a9e4048acb30be2f27d19cf0657d8689dd6dad4cb6b6d80f8fc56b9b2ac3b595
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/odf-cosi-sidecar-rhel9:sha256:22c95138c3ca3d086227da3181548a73e86eb244670e0f6acf8ed9011883fdb2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/odf-csi-addons-rhel9-operator:sha256:5cae35740c21d6d3c5d72986edc2b160091b8892bce21d9e0e5a6a1cf92dba26
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/odf-csi-addons-sidecar-rhel9:sha256:0c5becf0a62d24cb986b0338432e30fa1952487392d3712d190c85f35300cd97
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/cephcsi-rhel9-operator:sha256:0b3b8d6d1c0cd176ab61c529ab42e7a12720f6a42bf89ca1568656bdbc463310
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/odf-multicluster-console-rhel9:sha256:27b15f29e01661f7b6857e5da669d4b81f9f1cbcd97e186603552455d82d3152
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/odf-multicluster-rhel9-operator:sha256:4f2e39222f959dccc6938430518c38f154f3c43d5975549be11c703067d4c074
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/odf-must-gather-rhel9:sha256:9deedfc639a9d85e63c2701f0e78f5beae221f7f7646bdbf8e6e37c88205a275
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/odf-rhel9-operator:sha256:42bf30dbe0a237936719b62aa1087075e7b387998d2143c2a16a7b7c9960e9fc
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/odr-rhel9-operator:sha256:61acc4a0fae3f3a706ef70a08f7bf10b2773299c0fdd546705028483a02cd241
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.15Fixed in: odf4/rook-ceph-rhel9-operator:sha256:fdf600ba18bcca35643aed1008c3b9084113c003994e347b38beb18413dc5cac
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/cephcsi-rhel9:sha256:28f2860ac1920009eda82fadd3bd134aa53e410974f257b2d700dd57a5ce55c8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/mcg-core-rhel9:sha256:f1c8c40ee99ee53c66bba5a4d81c87f1396097316f31dec48a1646701f41f232
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/mcg-rhel9-operator:sha256:63d7343bc58a15c3100d40a7db1c12684466f0c229b383ffa66f762578bd1c17
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/ocs-client-console-rhel9:sha256:2157276d6715734095eccf19ee2a3b8ee2610831e6db28db4d1549a45ef1226f
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/ocs-client-rhel9-operator:sha256:12de253d776c8a2b72966403179650aeee0ea3a4100be45a93b240fcf23ccc17
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/ocs-metrics-exporter-rhel9:sha256:57f81dbdd41c7ffba5d245a3cfff9192051443da9e77da67a54df4459f472a5a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/ocs-rhel9-operator:sha256:81406e5a67aa735204cbb02891f9074ce834e13d9c0225d2ee679dd49e3f3d73
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/odf-cli-rhel9:sha256:ca1b1124a86dc099788fba8296fcfa2c2398f1e23ff70f0192a71dc14ec20124
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/odf-console-rhel9:sha256:e471d0bc4bc0ed4c3a78b863fde8925079b19d7a8b876144057e740801a24c39
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/odf-csi-addons-rhel9-operator:sha256:924467600e2487103c8a1d4cd83df9afd3ae4ac8c0bb5442fe85f22b96c77d1a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/odf-csi-addons-sidecar-rhel9:sha256:f1461bb91214c8fce0a143e00353c7e61abd374e31476dc71beaa6d75a2d0847
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/odf-multicluster-console-rhel9:sha256:5f7a8b18679ae4b05476081de296a1bdb5428b8baf12186095ebae336ef47d74
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/odf-multicluster-rhel9-operator:sha256:4af5cbf6944b170e3578f0e904a57acbdef4ce27b7dbd9629b2a4d7c0231330d
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/odf-must-gather-rhel9:sha256:b1c07e33fd56322a7b6e26086cbe1bd1bc76651cc2b85984e12818a96b6b3ed1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/odf-rhel9-operator:sha256:a8c51e193d55d14f9ea4a897047478dfe63fec2b07de4306459fe92805063f8b
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/odr-rhel9-operator:sha256:370919c761070db74ae3d81496c801f0946a93b363f9457d2c77d57c51a8fc04
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/rook-ceph-rhel9-operator:sha256:e41fd9fa782d7cab0186bcd73cf9b0914710be12bf4ba191f4d02c5feb891902
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/cephcsi-rhel9:sha256:4732e19283a907e1a987590a0815e4c7b95c80218864eb6ae7f0393867a28e2e
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/mcg-core-rhel9:sha256:2a9ecf79a8209fb80fc189c2a05b68ebb3874dd2e1c404361f3b26533188e6a1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/mcg-rhel9-operator:sha256:57597555a31a799fec3dfbdc43949a8b3b1fb9bc02ef8a7990982335ee94f71d
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/ocs-client-console-rhel9:sha256:52b41ec0e8f6f6e5f39aa2f1c173eef364fcae6e78a8c6091f0c6b3583221034
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/ocs-client-rhel9-operator:sha256:b2ec7b94fa8e3e95fbe9195f0ae886d85fa6edc592949b6d28eb67e5e5cd1654
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/ocs-metrics-exporter-rhel9:sha256:f408b197483b49725f11757d3adac645353cfdafffff59298aca57bc012a538d
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/ocs-rhel9-operator:sha256:55e3e523175182a9f5536e3d331ad57596b5d28d51e7177efb875d16fa81ecc2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/odf-cli-rhel9:sha256:05e0499ac1613f5e1c7bcdca0a481a5fddc0497c48d36d6770f40e69eaa10ba1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/odf-console-rhel9:sha256:d8ed86cee00a93e3d4a313f2a2ff9ffa0523552596acfcd3ff3d8f80ae1cd8e5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/odf-cosi-sidecar-rhel9:sha256:2cc37571ac6b16b0f64917fd0724f1b9551cbf3b0fcd6974d8290d2a72a38a82
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/odf-csi-addons-rhel9-operator:sha256:61ecd4e7a8b3074bb25090e0453f523677ac9db486b26acd5624e47dfeea977c
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/odf-csi-addons-sidecar-rhel9:sha256:cdef73e0cbd481a89d5d73958b497ec03fae71eabf99baf54fa8cc85c212e6f5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/odf-multicluster-console-rhel9:sha256:63b810beca8b6ccc35d1a80c6f0c42d3b50adea67c25ab352f6514fb5d1461cb
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/odf-multicluster-rhel9-operator:sha256:6812730c7d8139d2c212088c4f0ad0740f39cc5a56a449a008aef2fb58c15f0e
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/odf-must-gather-rhel9:sha256:5422a10cc5915dd45be9afe8088026dc9335430abff93c68445c12624072222a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/odf-rhel9-operator:sha256:b5c2f9936dee5d3a61215b9745b6204963213399a087e1e2502d79de8d2b7194
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/odr-rhel9-operator:sha256:9ce5157811f6d08cd803b1daad2b4d30cb1bf334a044b4676186321c322957f9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.17Fixed in: odf4/rook-ceph-rhel9-operator:sha256:a319b25a6d5deef4d0a0f365734d6be96fdd863962e36b306e9946521aec724c
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/cephcsi-rhel9:sha256:b251e7b26d4a6f3443d6d795a4d92992b5f79d56e5561477648eabae286d7641
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/cephcsi-rhel9-operator:sha256:eb1067cf493864c4ca48459b2f9adf0964b3849564743a17e7a3686e925e448f
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/mcg-core-rhel9:sha256:c8dce4a25f10645edc649576e995b2b6619c8bc39c2c30d3cffbe3a3c3a86b35
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/mcg-rhel9-operator:sha256:00bdcca61bc8765fbbc838deeb86392ce25c72f0170241c270484ec9b77bd263
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/ocs-client-console-rhel9:sha256:e9f1e2743fe9930ccb470c6eb8d9e9577640fe6a9ab7a013648e513b6216fa74
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/ocs-client-rhel9-operator:sha256:a492d94ceced107b6b8dc7339cca181875d2245c5f8ac9ecc51979160a341d76
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/ocs-metrics-exporter-rhel9:sha256:ecc54bc4e8be6f3bfade15c23827e84445acc12c63b4e133cee73e57ac5a42aa
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/ocs-rhel9-operator:sha256:4d0f4fe708b4aea53b1bbf71fb10a41fd50313d62fb380b7cafd6abb130b5024
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/odf-cli-rhel9:sha256:c786effa06598ecb80690644d1c9075588e123ad200db05686568a80a1feeb56
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/odf-console-rhel9:sha256:65176cfc11dcc49e7b175404475dd0fcd9ad14e3b3e8ab85816cf52d64c51512
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/odf-cosi-sidecar-rhel9:sha256:20c7a4f70f6000f204a3c53c153aaa3c08be94c98c09b90f538b2a19156a00e0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/odf-csi-addons-rhel9-operator:sha256:bdfb055790f5c58fd4d5699cdcb07151f4be909d920f3243d4610b74183a961d
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/odf-csi-addons-sidecar-rhel9:sha256:4da2afb698447df4a45a8bc1b479e57a5da7cd7a3ace09e131717a31155ec8a5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/odf-multicluster-console-rhel9:sha256:7c5b233911109f0a218b634d8d317229a3949b2ea5936b7ec91ebfcdd6f15060
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/odf-multicluster-rhel9-operator:sha256:228bbd789e0de72a48a3673fab02aa53b14485fce3b27d2e4cd30eb30f5ac1b6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/odf-must-gather-rhel9:sha256:ca0284c10827905e1576ea0a01bb09425acbf96d30b2e556b34e22e2d0115196
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/odf-rhel9-operator:sha256:65c4003dfb7180e015ec74fe9e599bcc313501ab9b9c67d61fc59a68e6c89349
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/odr-rhel9-operator:sha256:83746838d5b190c09d22dd1cc34c7d4822022534c624be10854bd9b660713932
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.18Fixed in: odf4/rook-ceph-rhel9-operator:sha256:25b4647a37692cde90c499460a62a78342827265992adc0740bef650028fc2df
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/cephcsi-rhel9:sha256:28f45874f4593c9ad84b954cb5445cd8125de33161f4080febe1896a559121b3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/cephcsi-rhel9-operator:sha256:7c681bce8c5042f259358ea684b9bd48a0df2cdea24bee9538dc88acd74ecc80
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/mcg-core-rhel9:sha256:bcce8218567f2df0f4395bdd069d040cbd94b3e0c0abf4cb195477a679320974
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/mcg-rhel9-operator:sha256:8aaf81378e111a163d5247530dba0c9ee2f3693786ae023b3efcdda91be2cc16
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/ocs-client-console-rhel9:sha256:3fbaf8ca4c8b8a064eb168cf26ea379eb6145371084da71ce78fb27fc8dd720b
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/ocs-client-rhel9-operator:sha256:a2f84aa279abe89c5d2a519cb57cd2c9f3bc5ba216fad8aff1c24494128ac5db
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/ocs-metrics-exporter-rhel9:sha256:dfa33da31e1a8a5f72e1aa7b4b256490ff5a8c5fac4c5dca8c91605c44f9f58f
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/ocs-rhel9-operator:sha256:df77550beeda68cbff84a45ddca9b74893ece1f7ab026e8a94f851a263745e92
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/odf-cli-rhel9:sha256:b47af6a5fdbb611237e21c6d834d9ea5a1e0199d1a8aab742daafeedcd355960
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/odf-cloudnative-pg-rhel9-operator:sha256:065ff5c9e99aabcce5185f1a7cd733fe4dfbafe9755575e3574f498dda2c9cac
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/odf-console-rhel9:sha256:78c78cc8462ff77032b9ff174a933da2c6c1b40ac9ae1e4452cfb144df8823f2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/odf-cosi-sidecar-rhel9:sha256:36fef1c47ecf08729c1aba7244c2d796d623a53d4dcac843e6b048d49332868d
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/odf-csi-addons-rhel9-operator:sha256:929d332de97586146dace205a0eaf53faef24a3d8b9c84ae50958ed2fe419f3c
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/odf-csi-addons-sidecar-rhel9:sha256:78f2d2606e4c3b5a828f5f2d426989aa6af0da0623c541cf9f3ae356472da78f
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/odf-multicluster-console-rhel9:sha256:3a95ef7bd1e7bdde31957c1d6121c1ef4d0678e3f751ae0177f321c11f39679f
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/odf-multicluster-rhel9-operator:sha256:b02267aa5be61d8fdb1fb8dffce977de5e769ae78f021b45b3fdd2f918e71492
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/odf-must-gather-rhel9:sha256:aee192e7489498525f7534871fa312cf4dd814156490151d39e336feefa8ddbc
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/odf-rhel9-operator:sha256:900e8b94a4d50675bfc2a53405f7c7ea678932a2991b206ecc28120a9cfc3225
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/odr-rhel9-operator:sha256:7bd1a94a976da8b2f9dc5a129fe9aa1c1ff6a18a430c71404f6dbf9cde3860b8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/rook-ceph-rhel9-operator:sha256:fc18daa484c2e7f641e79c87f8322b6452ae10af3b6a87e8d4cdae4301a3a4da
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/cephcsi-rhel9:sha256:e5f93f28233a86972cde565fe3564b47a739ff0d99f0c76d9113c35665dc8075
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/cephcsi-rhel9-operator:sha256:7264546472b9841c67d768bfc24a4120b4d9216de91779a90bf918636d2cb558
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/mcg-core-rhel9:sha256:8c82a478ebc0918907971653269363058257118c6734c6589bb7e13d00c9388f
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/mcg-rhel9-operator:sha256:b88f11532b8d0c1f673e2c7e454cf7637e9830cf25bdfc61b71fb8b98947c73f
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/ocs-client-console-rhel9:sha256:d9fb83925ac1a019c400b603171c43b23f726dabaf933420a32dfc9d28571d24
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/ocs-client-rhel9-operator:sha256:c50de6e5c0a3705afb02e9301073992484bdeb989f9e529920848c609713cefc
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/ocs-metrics-exporter-rhel9:sha256:f8640c08269f281d041f5ffe39db8c4401e361a861ee205740f36969eb8b8aaf
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/ocs-rhel9-operator:sha256:28fef0042ac3b41929f2f8fe29786eaf7bc38a9ffb6ef4d5c7c3fba275312ce1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/odf-cli-rhel9:sha256:3fce5a9df8c3bc0de1880a6c6e306e6515df91a3e3a730afcbf1399e98771c86
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/odf-cloudnative-pg-rhel9-operator:sha256:7224dca7e4baad69af171bd79a49fd79a8a8cf686aec25d6d33a9266be945362
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/odf-console-rhel9:sha256:8439ea9b94e6ebe0038c0fa74914c26839532c716c5e25e5f525318be10ca67e
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/odf-cosi-sidecar-rhel9:sha256:694354fb3e2505c0b47c296d601b95f3a020df9a1e3f7e4b8ccf759b3073f57d
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/odf-csi-addons-rhel9-operator:sha256:b7e21acb1b51d50e88d92907a82632ba4955aa0a7e8749537cdad88b92513c8c
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/odf-csi-addons-sidecar-rhel9:sha256:e09d93454d49936467874177434f591df6918a828aa09c22e443d07adc716649
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/odf-external-snapshotter-rhel9-operator:sha256:48c5ff6cef7d6df2220c851dee07213c98bcf8019a03c265a9de040e87401f49
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/odf-external-snapshotter-sidecar-rhel9:sha256:a07d753741e8f635c03ff0fa83ae28a0f8b444678c92e109784bea549a840624
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/odf-multicluster-console-rhel9:sha256:8899629b9124b774fc6cc1e4aa8bd655f61989114f381d0b542b428e7d6000b8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/odf-multicluster-rhel9-operator:sha256:55f1c53dab3fd98faef3888b81536ed2aab60de198938fdc55afd0eae1d678aa
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/odf-must-gather-rhel9:sha256:56d41a2a9dbb590dbf1690949e16602b38c1a97fd8698272a0f0d5f5f82389c5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/odf-rhel9-operator:sha256:fb8c5faf2e866c02d0cb11e71430d95fe3ceab5f15ff2a82be2ee86d0a57de3c
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/odr-rhel9-operator:sha256:c3b69f08c0ca813e311eb84d562dcefa9a6651e605b250c46e6bb70ac93f698a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.2Fixed in: odf4/rook-ceph-rhel9-operator:sha256:28853c9db8d0a54d42c7f4fcaa591a80dd3e5273d8e463d3496fbe334f9f9721
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.16Fixed in: odf4/odf-cosi-sidecar-rhel9:sha256:0569ea1b4783e21b056242d9f2a40a548ff560a5ab957245444cc3770ed664db
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/cephcsi-rhel9:sha256:bc983cfa30512d0dbd5742a998659e0e87c28e9d32817397478190da8508130d
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/mcg-cli-rhel9:sha256:13b0299a3e045cc02e6d864398e3676b1dc038504fab8993a92b8b8fdff252c6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/mcg-core-rhel9:sha256:152c336c76cc69fc11cd6d3957c781c8d1c733a3cbead2448efd202b35d034e2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/mcg-rhel9-operator:sha256:ab2921016d982438eec637035fe678a842757b9822bf6f80936137825dacf45b
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/ocs-client-console-rhel9:sha256:0a0e70953d2217d929b55a7a7a4c1e49c7e5f6b196b693312c252bfec2dc3843
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/ocs-client-rhel9-operator:sha256:4c3a738aa7e83a7aea9161c4ef48624a275756531a3d67b13e59b600a4e644ea
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.14Fixed in: odf4/ocs-metrics-exporter-rhel9:sha256:d3850e64b6707d4fa8c87efd652e4b06ee122c58fe43040b371295626f7d3784
View patch
redhatvendor investigatingvia redhat_api
Product: Red Hat Fuse 7Fixed in: io.hawt-project
redhatvendor investigatingvia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: ansible-automation-platform-26/lightspeed-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: automation-controller
redhatvendor investigatingvia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: automation-eda-controller
redhatvendor investigatingvia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: automation-gateway
redhatvendor investigatingvia redhat_api
Product: Red Hat build of Apache Camel - HawtIO 4Fixed in: io.hawt-project
redhatvendor investigatingvia redhat_api
Product: Red Hat build of Apicurio Registry 2Fixed in: io.apicurio-apicurio-registry
redhatvendor investigatingvia redhat_api
Product: Red Hat build of OptaPlanner 8Fixed in: org.optaweb.vehiclerouting-optaweb-vehicle-routing
redhatvendor investigatingvia redhat_api
Product: Red Hat Ceph Storage 6Fixed in: brace-expansion
redhatvendor investigatingvia redhat_api
Product: Cryostat 4Fixed in: io.cryostat-cryostat
redhatvendor investigatingvia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: ansible-automation-platform-25/lightspeed-rhel8
redhatvendor investigatingvia redhat_api
Product: Red Hat Data Grid 8Fixed in: org.infinispan-infinispan-console
redhatvendor investigatingvia redhat_api
Product: Red Hat Directory Server 11Fixed in: redhat-ds:11/389-ds-base
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: 389-ds-base
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: nodejs22
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: nodejs-nodemon
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: firefox
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: thunderbird
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: grafana
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: mozjs60
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: nodejs:20/nodejs
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: nodejs:20/nodejs-nodemon
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: nodejs:22/nodejs
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: nodejs:22/nodejs-nodemon
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: pcs
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: 389-ds-base
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: gjs
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: grafana
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: nodejs:20/nodejs
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: nodejs:20/nodejs-nodemon
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: nodejs:22/nodejs
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: nodejs:22/nodejs-nodemon
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: pcs
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: polkit
redhatvendor investigatingvia redhat_api
Product: Red Hat Fuse 7Fixed in: io.apicurio-apicurito
redhatvendor investigatingvia redhat_api
Product: Red Hat Fuse 7Fixed in: io.hawt-hawtio-online
redhatvendor investigatingvia redhat_api
Product: Red Hat Fuse 7Fixed in: io.syndesis-syndesis-parent
redhatvendor investigatingvia redhat_api
Product: Red Hat Fuse 7Fixed in: io.syndesis-syndesis-ui
redhatvendor investigatingvia redhat_api
Product: Red Hat Integration Camel K 1Fixed in: io.apicurio-apicurio-registry
redhatvendor investigatingvia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7Fixed in: io.hawt-project
redhatvendor investigatingvia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7Fixed in: org.jboss.hal-hal-parent
redhatvendor investigatingvia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8Fixed in: io.hawt-project
redhatvendor investigatingvia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8Fixed in: org.jboss.hal-hal-parent
redhatvendor investigatingvia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8Fixed in: org.keycloak-keycloak-parent
redhatvendor investigatingvia redhat_api
Product: Red Hat JBoss Enterprise Application Platform Expansion PackFixed in: io.hawt-project
redhatvendor investigatingvia redhat_api
Product: Red Hat JBoss Enterprise Application Platform Expansion PackFixed in: org.jboss.hal-hal-parent
redhatvendor investigatingvia redhat_api
Product: Red Hat JBoss Enterprise Application Platform Expansion PackFixed in: org.keycloak-keycloak-parent
redhatvendor investigatingvia redhat_api
Product: Red Hat Openshift Data Foundation 4Fixed in: odf4/mcg-core-rhel8
redhatvendor investigatingvia redhat_api
Product: Red Hat Openshift Data Foundation 4Fixed in: odf4/ocs-client-console-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat Openshift Data Foundation 4Fixed in: odf4/odf-console-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat Openshift Data Foundation 4Fixed in: odf4/odf-multicluster-console-rhel8
redhatvendor investigatingvia redhat_api
Product: Red Hat Process Automation 7Fixed in: org.kie-process-migration-service
redhatvendor investigatingvia redhat_api
Product: Red Hat Process Automation 7Fixed in: org.kie.workbench-kie-wb-common
redhatvendor investigatingvia redhat_api
Product: Red Hat Process Automation 7Fixed in: org.uberfire-uberfire-parent
redhatvendor investigatingvia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-rhel8
redhatvendor investigatingvia redhat_api
Product: Red Hat Single Sign-On 7Fixed in: org.keycloak-keycloak-parent
redhatvendor investigatingvia redhat_api
Product: streams for Apache Kafka 2Fixed in: com.github.streamshub-console
redhatvendor investigatingvia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: ansible-automation-platform-24/lightspeed-rhel8
redhatvendor investigatingvia redhat_api
Product: Red Hat AMQ Broker 7Fixed in: org.jolokia-jolokia-parent
redhatno patchvia redhat_api
Product: Red Hat Ceph Storage 7Fixed in: brace-expansion
redhatno patchvia redhat_api
Product: Red Hat Ceph Storage 8Fixed in: brace-expansion

Vendor Advisories (3)

microsoft2025-Jun/CVE-2025-5889

juliangruber brace-expansion index.js expand redos

Jun 10, 2025
npmGHSA-v6h2-p8h4-qcjwlow

brace-expansion Regular Expression Denial of Service vulnerability

Jun 9, 2025
redhatCVE-2025-5889Low

brace-expansion: juliangruber brace-expansion index.js expand redos

Jun 9, 2025

References

gist.github.com / mmmsssttt404/37a40ce7d6e5ca604858fe30814d9466
github.com / juliangruber/brace-expansion/pull/65/commits/a5b98a4f30d7813266b221435e1eaaf25a1b0ac5
github.com / juliangruber/brace-expansion/releases/tag/v4.0.1
vuldb.com
vuldb.com
vuldb.com