title: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.18.0 release
description: PostCSS: Improper input validation in PostCSS cross-spawn: regular expression denial of service golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html dompurify: XSS vulnerability via prototype pollution virtualenv: potential command injection via virtual environment activation scripts nanoid: nanoid mishandles non-integer values
cpes: cpe:/a:redhat:openshift_devspaces:3::el9