Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.15.4

🗓️ 04 Mar 2026 07:12:04Reported by RedHatType

redhat🔗 access.redhat.com👁 11 Views

Red Hat OpenShift Pipelines 1.15.4 GA release of the OpenShift Pipelines Operator.

Reporter	Title	Published	Views	Family All 2039
vulnersOsv	@dojo/cli-test-intern (>=0.1.0, <=2.0.0-beta3.1), express_mvc (>=4.1.1, <=4.3.10) +7 more potentially affected by CVE-2025-13465 +1 more via lodash-amd (4.16.4)	21 Jan 202623:01	–	vulnersosv
vulnersOsv	4game-support-ckeditor5-custom-build (>=0.0.1, <=0.0.5), 87-midnight-ckeditor5 (>=0.0.3, <=0.0.5) +4545 more potentially affected by CVE-2025-13465 via lodash-es (>=4.0.0, <=4.17.22)	21 Jan 202623:01	–	vulnersosv
vulnersOsv	@akashic/akashic-cli (>=2.16.49, <=2.17.21), @akashic/akashic-cli-export (>=1.8.28, <=1.9.17) +253 more potentially affected by CVE-2025-13465 +1 more via lodash.unset (>=4.0.2, <=4.5.2)	21 Jan 202623:01	–	vulnersosv
vulnersOsv	@0cfg/utils-node (>=0.1.2, <=0.1.8), @b0ase/path402-api (4.0.0-alpha.1) +262 more potentially affected by CVE-2025-6547 via pbkdf2 (>=3.0.4, <=3.1.2)	23 Jun 202522:42	–	vulnersosv
vulnersOsv	0.edsql (>=1.0.49, <=1.0.50), 0x-v4-nft (1.1.0) +8889 more potentially affected by CVE-2024-37890 via ws (>=7.0.0, <=7.5.9)	17 Jun 202419:09	–	vulnersosv
vulnersOsv	@akashic/akashic-cli (>=2.16.49, <=2.17.21), @akashic/akashic-cli-export (>=1.8.28, <=1.9.17) +253 more potentially affected by CVE-2025-13465 +1 more via lodash.unset (>=4.0.2, <=4.5.2)	31 Mar 202623:02	–	vulnersosv
vulnersOsv	-fides-amor-et-lux (1.0.0), 20_nogo (>=1.0.0, <=1.1.4) +1104 more potentially affected by CVE-2025-12816 via node-forge (>=1.0.0, <=1.3.1)	25 Nov 202519:42	–	vulnersosv
vulnersOsv	org.webjars.npm:ethereum-cryptography (0.1.3), org.webjars.npm:parse-asn1 (>=5.0.0, <=5.1.6) potentially affected by CVE-2025-6547 via org.webjars.npm:pbkdf2 (3.1.2)	23 Jun 202522:42	–	vulnersosv
vulnersOsv	@aaronuu/react-forms (>=0.0.1, <=0.2.2), @actra-development-oss/redux-persist-transform-filter-immutable (>=0.1.1, <=1.0.0) +777 more potentially affected by CVE-2025-13465 via lodash.unset (>=4.0.2, <=4.18.0)	21 Jan 202623:01	–	vulnersosv
vulnersOsv	4game-support-ckeditor5-custom-build (>=0.0.1, <=0.0.5), 87-midnight-ckeditor5 (>=0.0.3, <=0.0.5) +4545 more potentially affected by CVE-2025-13465 +1 more via lodash-es (>=4.0.0, <=4.17.22)	21 Jan 202623:01	–	vulnersosv

Source	Link
access	www.access.redhat.com/security/cve/CVE-2024-37890
access	www.access.redhat.com/security/cve/CVE-2025-12816
access	www.access.redhat.com/security/cve/CVE-2025-13465
access	www.access.redhat.com/security/cve/CVE-2025-15284
access	www.access.redhat.com/security/cve/CVE-2025-6545
access	www.access.redhat.com/security/cve/CVE-2025-6547
access	www.access.redhat.com/security/cve/CVE-2025-66031
access	www.access.redhat.com/security/cve/CVE-2025-66506
access	www.access.redhat.com/security/cve/CVE-2025-66564
access	www.access.redhat.com/security/cve/CVE-2025-9287

13 Sep 2026 06:09Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.18.6 - 9.1

CVSS 49.1

EPSS0.01627

SSVC

Red Hat OpenShift Pipelines OpenShift Pipelines Operator Release 1.15.4