title: Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.5.7 security updates and bug fixes
description: go-retryablehttp: url might write sensitive information to log file elliptic: nodejs/elliptic: EDDSA signature malleability due to missing signature length check elliptic: nodejs/elliptic: ECDSA signature malleability due to missing checks elliptic: nodejs/elliptic: ECDSA implementation malleability due to BER-enconded signatures being allowed elliptic: Missing Validation in Elliptic's EDDSA Signature Verification
cpes: cpe:/a:redhat:multicluster_engine:2.5::el8