Vulnerabilities of Red Hat Red Hat Discovery 2

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-44495	Axios is a promise based HTTP client for the browser and Node.js	7.0 High	Jun 11, 2026
CVE-2026-44494	Axios is a promise based HTTP client for the browser and Node.js	8.7 High	Jun 11, 2026
CVE-2026-44492	Axios is a promise based HTTP client for the browser and Node.js	8.6 High	Jun 11, 2026
CVE-2026-46625	JavaScript Cookie is a JavaScript API for handling cookies, client-side	7.5 High	Jun 10, 2026
CVE-2025-71319	image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block…	8.7 High	Jun 9, 2026
CVE-2026-45447	Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7…	Not rated	Jun 9, 2026
CVE-2026-11332	Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution	7.8 High	Jun 5, 2026
CVE-2026-34993	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python	6.4 Medium	Jun 2, 2026
CVE-2026-5419	A flaw was found in gnutls	3.7 Low	Jun 1, 2026
CVE-2024-52011	launch-editor allows users to open files with line numbers in editor from Node.js	7.5 High	Jun 1, 2026
CVE-2026-8643	pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved…	4.1 Medium	Jun 1, 2026
CVE-2026-42013	Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name	8.2 High	May 26, 2026
CVE-2026-42015	Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling	5.3 Medium	May 26, 2026
CVE-2026-42012	A flaw was found in gnutls	7.1 High	May 26, 2026
CVE-2026-5260	Gnutls: gnutls: information disclosure via heap overread in rsa key exchange	8.2 High	May 26, 2026
CVE-2026-48864	A flaw was found in libsolv	7.8 High	May 26, 2026
CVE-2026-9256	NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module	8.1 High	May 22, 2026
CVE-2026-9277	shell-quote's `quote()` function did not validate object-token inputs against the operator model used by `parse()`	8.1 High	May 22, 2026
CVE-2026-29518	Rsync versions before 3.4.3 contain a time-of-check to time-of-use (TOCTOU) race condition in daemon file handling…	7.3 High	May 20, 2026
CVE-2026-43618	Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32-bit…	6.1 Medium	May 20, 2026
CVE-2026-42009	Gnutls: gnutls: denial of service via dtls packet reordering vulnerability	7.5 High	May 18, 2026
CVE-2026-45736	ws is an open source WebSocket client and server for Node.js	4.4 Medium	May 15, 2026
CVE-2026-6477	Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(),…	8.8 High	May 14, 2026
CVE-2026-44432	urllib3 is an HTTP client library for Python	8.9 High	May 13, 2026
CVE-2026-45186	In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via…	2.9 Low	May 10, 2026

Other Red Hat products