Vulnerabilities of Red Hat Red Hat Connectivity Link 1

Is your version affected?

CVE	Summary	Score	Published
CVE-2025-61726	The net/url package does not set a limit on the number of query parameters in a query	7.5 High	Jan 28, 2026
CVE-2026-0775	npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability	7.0 High	Jan 23, 2026
CVE-2025-13465	The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution	6.9 Medium	Jan 21, 2026
CVE-2026-23950	node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3	8.8 High	Jan 20, 2026
CVE-2026-23745	node-tar is a Tar for Node.js	8.2 High	Jan 16, 2026
CVE-2026-22771	Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway	8.8 High	Jan 12, 2026
CVE-2026-22029	React Router is a router for React	8.0 High	Jan 10, 2026
CVE-2025-61686	React Router is a router for React	9.1 Critical	Jan 10, 2026
CVE-2026-21441	urllib3 is an HTTP client library for Python	8.9 High	Jan 7, 2026
CVE-2025-25209	The AuthPolicy metadata on Red Hat Connectivity Link contains an object which stores secretes, however it assumes…	5.7 Medium	Jun 9, 2025
CVE-2025-25208	Rhcl: authorino denial of service through authpolicy with sharedsecretref severity	5.7 Medium	Jun 9, 2025
CVE-2025-25207	Rhcl: authpolicy callbacks result in denial of service in authorino severity	5.7 Medium	Jun 9, 2025
CVE-2024-12401	A flaw was found in the cert-manager package	4.4 Medium	Dec 12, 2024