Vulnerabilities of Red Hat Red Hat Developer Hub

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-43997	vm2 is an open source vm/sandbox for Node.js	10.0 Critical	May 13, 2026
CVE-2026-44432	urllib3 is an HTTP client library for Python	8.9 High	May 13, 2026
CVE-2026-44289	protobufjs compiles protobuf definitions into JavaScript (JS) functions	7.5 High	May 13, 2026
CVE-2026-42338	ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript	5.3 Medium	May 12, 2026
CVE-2026-42264	Axios is a promise based HTTP client for the browser and Node.js	7.4 High	May 8, 2026
CVE-2026-33811	When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a…	7.5 High	May 7, 2026
CVE-2026-39820	Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion…	7.5 High	May 7, 2026
CVE-2026-42499	Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322	7.5 High	May 7, 2026
CVE-2026-33814	When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it…	7.5 High	May 7, 2026
CVE-2026-41139	Math.js is an extensive math library for JavaScript and Node.js	8.8 High	May 7, 2026
CVE-2026-6321	fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize()…	7.5 High	May 4, 2026
CVE-2026-26956	vm2 is an open source vm/sandbox for Node.js	9.8 Critical	May 4, 2026
CVE-2026-26332	vm2 is an open source vm/sandbox for Node.js	9.8 Critical	May 4, 2026
CVE-2026-24781	vm2 is an open source vm/sandbox for Node.js	9.8 Critical	May 4, 2026
CVE-2026-24120	vm2 is an open source vm/sandbox for Node.js	9.8 Critical	May 4, 2026
CVE-2026-24118	vm2 is an open source vm/sandbox for Node.js	9.8 Critical	May 4, 2026
CVE-2026-42044	Axios is a promise based HTTP client for the browser and Node.js	6.5 Medium	Apr 24, 2026
CVE-2026-42033	Axios is a promise based HTTP client for the browser and Node.js	7.4 High	Apr 24, 2026
CVE-2026-40897	Math.js is an extensive math library for JavaScript and Node.js	8.8 High	Apr 24, 2026
CVE-2026-40906	Electric is a Postgres sync engine	10.0 Critical	Apr 21, 2026
CVE-2026-40895	follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows…	6.9 Medium	Apr 21, 2026
CVE-2026-41242	protobufjs compiles protobuf definitions into JavaScript (JS) functions	9.4 Critical	Apr 18, 2026
CVE-2026-40175	Axios is a promise based HTTP client for the browser and Node.js	4.8 Medium	Apr 10, 2026
CVE-2025-62718	Axios is a promise based HTTP client for the browser and Node.js	6.3 Medium	Apr 9, 2026
CVE-2026-32283	If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection…	7.5 High	Apr 8, 2026

Other Red Hat products