Vulnerabilities of Red Hat Red Hat Developer Hub

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-33810	When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to…	7.5 High	Apr 8, 2026
CVE-2026-34601	xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module	7.5 High	Apr 2, 2026
CVE-2026-4800	The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same…	8.1 High	Mar 31, 2026
CVE-2026-33941	Handlebars provides the power necessary to let users build semantic templates	8.3 High	Mar 27, 2026
CVE-2026-33938	Handlebars provides the power necessary to let users build semantic templates	8.1 High	Mar 27, 2026
CVE-2026-33937	Handlebars provides the power necessary to let users build semantic templates	9.8 Critical	Mar 27, 2026
CVE-2026-4926	Impact: A bad regular expression is generated any time you have multiple sequential optional groups (curly brace…	7.5 High	Mar 26, 2026
CVE-2026-33001	Jenkins 2.554 and earlier, LTS 2.541.2 and earlier does not safely handle symbolic links during the extraction of .tar…	8.8 High	Mar 18, 2026
CVE-2025-69196	FastMCP is the standard framework for building MCP applications	7.4 High	Mar 16, 2026
CVE-2026-2229	ImpactThe undici WebSocket client is vulnerable to a denial-of-service attack due to improper validation of…	7.5 High	Mar 12, 2026
CVE-2026-1528	ImpactA server can reply with a WebSocket frame using the 64-bit length form and an extremely large length	7.5 High	Mar 12, 2026
CVE-2026-1526	The undici WebSocket client is vulnerable to a denial-of-service attack via unbounded memory consumption during…	7.5 High	Mar 12, 2026
CVE-2026-27137	When verifying a certificate chain which contains a certificate containing multiple email address constraints which…	7.5 High	Mar 6, 2026
CVE-2026-2293	A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when…	8.2 High	Feb 27, 2026
CVE-2026-27959	Koa is middleware for Node.js using ES2017 async functions	7.5 High	Feb 26, 2026
CVE-2026-26318	systeminformation is a System and OS information library for node.js	8.8 High	Feb 19, 2026
CVE-2026-26280	systeminformation is a System and OS information library for node.js	8.4 High	Feb 19, 2026
CVE-2026-24842	node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink…	8.2 High	Jan 28, 2026
CVE-2026-0775	npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability	7.0 High	Jan 23, 2026
CVE-2026-23950	node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3	8.8 High	Jan 20, 2026
CVE-2026-23745	node-tar is a Tar for Node.js	8.2 High	Jan 16, 2026
CVE-2026-22029	React Router is a router for React	8.0 High	Jan 10, 2026
CVE-2025-61686	React Router is a router for React	9.1 Critical	Jan 10, 2026
CVE-2026-21441	urllib3 is an HTTP client library for Python	8.9 High	Jan 7, 2026
CVE-2025-14874	A flaw was found in Nodemailer	7.5 High	Dec 18, 2025

Other Red Hat products