Known vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.13

Is your version affected?

CVE	Summary	Score	Published
CVE-2026-35469	spdystream is a Go library for multiplexing streams over SPDY connections	8.7 High	Apr 16, 2026
CVE-2026-33186	gRPC-Go is the Go language implementation of gRPC	9.1 Critical	Mar 20, 2026
CVE-2026-26017	CoreDNS is a DNS server that chains plugins	7.7 High	Mar 6, 2026
CVE-2026-26018	CoreDNS is a DNS server that chains plugins	7.5 High	Mar 6, 2026
CVE-2026-25639	Axios is a promise based HTTP client for the browser and Node.js	7.5 High	Feb 9, 2026
CVE-2025-61726	The net/url package does not set a limit on the number of query parameters in a query	7.5 High	Jan 28, 2026
CVE-2026-21721	The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:*…	8.1 High	Jan 27, 2026
CVE-2025-13465	The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution	6.9 Medium	Jan 21, 2026
CVE-2026-22029	React Router is a router for React	8.0 High	Jan 10, 2026
CVE-2025-7195	Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used…	6.4 Medium	Aug 7, 2025