Important: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.24.0 Release.

🗓️ 23 Oct 2025 20:33:38Reported by RedHatType

OpenShift Dev Spaces 3.24.0 release with Che 7.109; supports devfile 2.1 and 2.2; migrate from version one.

Reporter	Title	Published	Views	Family All 2029
vulnersOsv	org.webjars.npm:better-sqlite3 (12.11.1), org.webjars.npm:image-thumbnail (1.0.15) +4 more potentially affected by CVE-2025-59343 via org.webjars.npm:tar-fs (2.1.5)	24 Sep 202518:57	–	vulnersosv
vulnersOsv	-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +9102 more potentially affected by CVE-2022-25883 via semver (>=6.0.0, <=6.3.0)	21 Jun 202306:30	–	vulnersosv
vulnersOsv	@hidoo/express-engine-handlebars (0.8.2), @hidoo/gulp-project-generator (0.19.0) potentially affected by CVE-2021-35065 via glob-parent (6.0.0)	18 Jul 202217:03	–	vulnersosv
vulnersOsv	0wcc9yywcywy (1.0.0), 0wu8yw8by8cw (1.0.0) +2437 more potentially affected by CVE-2025-59343 via tar-fs (>=3.0.2, <=3.1.0)	24 Sep 202518:57	–	vulnersosv
vulnersOsv	007putra-my-bot (1.1.1), 03-asenkronsdasdsadavehttprequest (1.0.0) +17760 more potentially affected by CVE-2022-25883 via semver (>=7.0.0, <=7.5.1)	21 Jun 202306:30	–	vulnersosv
vulnersOsv	46c-sector (>=1.0.0, <=1.2.1), @abtasty-innovation/cb-tag (>=0.0.1, <=0.1.3) +176 more potentially affected by CVE-2022-46175 via json5 (1.0.1)	29 Dec 202201:51	–	vulnersosv
vulnersOsv	6ix (0.0.0-canary.0), 9ight (>=0.0.0-canary.0, <=0.0.0-canary.6) +803 more potentially affected by CVE-2022-46175 via json5 (>=2.0.0, <=2.2.1)	29 Dec 202201:51	–	vulnersosv
vulnersOsv	-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0.8.18-p11 (0.8.18-p12) +33591 more potentially affected by CVE-2022-25883 via semver (>=5.0.0, <=5.7.1)	25 Jan 202316:00	–	vulnersosv
vulnersOsv	007putra-my-bot (1.1.1), 03-asenkronsdasdsadavehttprequest (1.0.0) +17760 more potentially affected by CVE-2022-25883 via semver (>=7.0.0, <=7.5.1)	25 Jan 202316:00	–	vulnersosv
vulnersOsv	0wcc9yywcywy (1.0.0), 0wu8yw8by8cw (1.0.0) +2437 more potentially affected by CVE-2025-59343 via tar-fs (>=3.0.2, <=3.1.0)	24 Sep 202518:57	–	vulnersosv

Source	Link
access	www.access.redhat.com/documentation/en-us/red_hat_openshift_dev_spaces/3.24/html/administration_guide/installing-devspaces
access	www.access.redhat.com/security/cve/CVE-2021-35065
access	www.access.redhat.com/security/cve/CVE-2022-25883
access	www.access.redhat.com/security/cve/CVE-2022-3517
access	www.access.redhat.com/security/cve/CVE-2022-46175
access	www.access.redhat.com/security/cve/CVE-2025-41248
access	www.access.redhat.com/security/cve/CVE-2025-41249
access	www.access.redhat.com/security/cve/CVE-2025-55163
access	www.access.redhat.com/security/cve/CVE-2025-59343
access	www.access.redhat.com/security/cve/CVE-2025-9566

10 Sep 2026 09:55Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.18.1 - 8.8

CVSS 48.7

EPSS0.09304

SSVC