Vulnerabilities of Red Hat Cluster Observability Operator 1.5.0

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-33939	Handlebars provides the power necessary to let users build semantic templates	7.5 High	Mar 27, 2026
CVE-2026-33938	Handlebars provides the power necessary to let users build semantic templates	8.1 High	Mar 27, 2026
CVE-2026-33937	Handlebars provides the power necessary to let users build semantic templates	9.8 Critical	Mar 27, 2026
CVE-2026-33896	Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript	7.4 High	Mar 27, 2026
CVE-2026-33895	Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript	7.5 High	Mar 27, 2026
CVE-2026-33894	Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript	7.5 High	Mar 27, 2026
CVE-2026-33891	Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript	7.5 High	Mar 27, 2026
CVE-2026-32285	The Delete function fails to properly validate offsets when processing malformed JSON input	7.5 High	Mar 26, 2026
CVE-2026-33228	flatted is a circular JSON parser	8.9 High	Mar 20, 2026
CVE-2026-2229	ImpactThe undici WebSocket client is vulnerable to a denial-of-service attack due to improper validation of…	7.5 High	Mar 12, 2026
CVE-2026-1528	ImpactA server can reply with a WebSocket frame using the 64-bit length form and an extremely large length	7.5 High	Mar 12, 2026
CVE-2026-1526	The undici WebSocket client is vulnerable to a denial-of-service attack via unbounded memory consumption during…	7.5 High	Mar 12, 2026
CVE-2026-32141	flatted is a circular JSON parser	7.5 High	Mar 12, 2026
CVE-2026-29063	Immutable.js provides many Persistent Immutable data structures	8.7 High	Mar 6, 2026

Other Red Hat products