Vulnerabilities of Red Hat Red Hat Data Grid 8

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-39304	Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ	Not rated	Apr 10, 2026
CVE-2025-62718	Axios is a promise based HTTP client for the browser and Node.js	6.3 Medium	Apr 9, 2026
CVE-2026-5795	In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable	7.4 High	Apr 8, 2026
CVE-2026-34197	Exploited Apache ActiveMQ Improper Input Validation Vulnerability	Not rated	Apr 7, 2026
CVE-2026-33941	Handlebars provides the power necessary to let users build semantic templates	8.3 High	Mar 27, 2026
CVE-2026-33940	Handlebars provides the power necessary to let users build semantic templates	8.1 High	Mar 27, 2026
CVE-2026-33939	Handlebars provides the power necessary to let users build semantic templates	7.5 High	Mar 27, 2026
CVE-2026-33938	Handlebars provides the power necessary to let users build semantic templates	8.1 High	Mar 27, 2026
CVE-2026-33937	Handlebars provides the power necessary to let users build semantic templates	9.8 Critical	Mar 27, 2026
CVE-2026-33896	Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript	7.4 High	Mar 27, 2026
CVE-2026-33895	Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript	7.5 High	Mar 27, 2026
CVE-2026-33894	Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript	7.5 High	Mar 27, 2026
CVE-2026-33891	Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript	7.5 High	Mar 27, 2026
CVE-2026-28367	Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator	8.7 High	Mar 27, 2026
CVE-2026-28369	Undertow: undertow: request smuggling via malformed http request headers	8.7 High	Mar 27, 2026
CVE-2026-28368	Undertow: undertow: request smuggling via inconsistent header parsing	8.7 High	Mar 27, 2026
CVE-2026-4926	Impact: A bad regular expression is generated any time you have multiple sequential optional groups (curly brace…	7.5 High	Mar 26, 2026
CVE-2025-67030	Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before…	8.8 High	Mar 25, 2026
CVE-2026-3260	A flaw was found in Undertow	5.9 Medium	Mar 24, 2026
CVE-2026-33228	flatted is a circular JSON parser	8.9 High	Mar 20, 2026
CVE-2026-32141	flatted is a circular JSON parser	7.5 High	Mar 12, 2026
CVE-2026-24308	Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4 on all platforms allows an…	Not rated	Mar 7, 2026
CVE-2026-24281	Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS (PTR) when IP SAN validation fails,…	Not rated	Mar 7, 2026
CVE-2026-29074	SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files	7.5 High	Mar 6, 2026
CVE-2026-1605	In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed…	7.5 High	Mar 5, 2026

Other Red Hat products