This Red Hat security advisory (RHSA-2025:3928) addresses several security vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes (RHACS) 4.5. The vulnerabilities include CVE-2024-57083, a prototype pollution vulnerability in redoc that can cause denial of service; CVE-2024-21536, a flaw in the http-proxy-middleware package that also leads to denial of service; and CVE-2025-30204, a flaw in the golang-jwt library that allows excessive memory allocation during JWT header parsing. The advisory also includes security updates for libxml2 and openssl. The vendor recommends upgrading to RHACS 4.5.9, which contains fixes for these issues. The advisory covers multiple architectures including x86_64, ppc64le, and s390x for RHEL 8.

The vulnerabilities can cause denial of service conditions or excessive memory consumption, potentially impacting the availability and stability of RHACS deployments. Prototype pollution in redoc (CVE-2024-57083) can be exploited to trigger a denial of service. The http-proxy-middleware flaw (CVE-2024-21536) also leads to denial of service. The golang-jwt vulnerability (CVE-2025-30204) allows excessive memory allocation during JWT header parsing, which may be leveraged to disrupt service. No known exploits in the wild have been reported at this time.

Red Hat has released RHACS version 4.5.9 which includes fixes for these vulnerabilities. Users running versions >=4.5.0 and <4.5.9 are strongly advised to upgrade to 4.5.9 to remediate these security issues. No additional mitigation steps are indicated beyond applying the official patch release.