Red Hat OpenShift Service Mesh 2

• CVE-2024-11831 Medium 5.4 Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript 1.1%
• CVE-2025-0754 Medium 4.3 Envoyproxy: openshift service mesh 2.6.3 and 2.5.6 envoy header handling allows log injection and potential spoofing 0.3%
• CVE-2025-0752 High 7.1 Envoyproxy: openshift service mesh envoy http header sanitization bypass leading to dos and unauthorized access 0.4%