Vulnerabilities of Red Hat Red Hat Developer Hub

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-39821	The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label	9.6 Critical	May 22, 2026
CVE-2026-44005	vm2 is an open source vm/sandbox for Node.js	10.0 Critical	May 13, 2026
CVE-2026-45411	vm2 is an open source vm/sandbox for Node.js	9.8 Critical	May 13, 2026
CVE-2026-44009	vm2: Sandbox Breakout Through Null Proto Exception	9.8 Critical	May 13, 2026
CVE-2026-44008	vm2 has sandbox breakout via `neutralizeArraySpeciesBatch`	9.8 Critical	May 13, 2026
CVE-2026-44007	vm2: nesting: true bypasses require: false, allowing sandbox escape to arbitrary OS command execution	9.1 Critical	May 13, 2026
CVE-2026-44006	vm2 is an open source vm/sandbox for Node.js	10.0 Critical	May 13, 2026
CVE-2026-43999	vm2 is an open source vm/sandbox for Node.js	9.9 Critical	May 13, 2026
CVE-2026-43997	vm2 is an open source vm/sandbox for Node.js	10.0 Critical	May 13, 2026
CVE-2026-26956	vm2 is an open source vm/sandbox for Node.js	9.8 Critical	May 4, 2026
CVE-2026-26332	vm2 is an open source vm/sandbox for Node.js	9.8 Critical	May 4, 2026
CVE-2026-24781	vm2 is an open source vm/sandbox for Node.js	9.8 Critical	May 4, 2026
CVE-2026-24120	vm2 is an open source vm/sandbox for Node.js	9.8 Critical	May 4, 2026
CVE-2026-24118	vm2 is an open source vm/sandbox for Node.js	9.8 Critical	May 4, 2026
CVE-2026-40906	Electric is a Postgres sync engine	10.0 Critical	Apr 21, 2026
CVE-2026-41242	protobufjs compiles protobuf definitions into JavaScript (JS) functions	9.4 Critical	Apr 18, 2026
CVE-2026-33937	Handlebars provides the power necessary to let users build semantic templates	9.8 Critical	Mar 27, 2026
CVE-2025-61686	React Router is a router for React	9.1 Critical	Jan 10, 2026

Other Red Hat products