rhcl-operator-container vulnerabilities
CVEs whose affected-version data names the rhcl-operator-container package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2025-25207Medium· 5.7Rhcl: authpolicy callbacks result in denial of service in authorino severity
The Authorino service in the Red Hat Connectivity Link is the authorization service for zero trust API security. Authorino allows the users with developer persona to add callbacks to be executed to HTTP endpoints once the authorization p…
▾ SunlitRed Hat · rhcl-operator-containerEPSS 0.28%via CVEORG
CVE-2025-25208Medium· 5.7Rhcl: authorino denial of service through authpolicy with sharedsecretref severity
A Developer persona can bring down the Authorino service, preventing the evaluation of all AuthPolicies on the cluster
▾ SunlitRed Hat · rhcl-operator-containerEPSS 0.35%via CVEORG