Skip to content

Vulnerabilities of Red Hat Red Hat Discovery 2

Is your version affected?

CVE Summary Score Published
CVE-2026-4424 Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing 7.5 High Mar 19, 2026
CVE-2026-27135 nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C 7.5 High Mar 18, 2026
CVE-2026-4111 Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive 7.5 High Mar 13, 2026
CVE-2026-29063 Immutable.js provides many Persistent Immutable data structures 8.7 High Mar 6, 2026
CVE-2026-25673 An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29 Not rated Mar 3, 2026
CVE-2026-26007 cryptography is a package designed to expose cryptographic primitives and recipes to Python developers 8.2 High Feb 10, 2026
CVE-2026-25646 LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network… 8.3 High Feb 10, 2026
CVE-2026-25639 Axios is a promise based HTTP client for the browser and Node.js 7.5 High Feb 9, 2026
CVE-2025-14831 Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification 5.3 Medium Feb 9, 2026
CVE-2026-1312 An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28 Not rated Feb 3, 2026
CVE-2026-1287 An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28 Not rated Feb 3, 2026
CVE-2026-1207 An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28 Not rated Feb 3, 2026
CVE-2025-15467 Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can… Not rated Jan 27, 2026
CVE-2025-9820 A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11… 4.0 Medium Jan 26, 2026
CVE-2026-24049 wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427 7.1 High Jan 22, 2026
CVE-2025-13465 The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution 6.9 Medium Jan 21, 2026
CVE-2026-22029 React Router is a router for React 8.0 High Jan 10, 2026
CVE-2025-61686 React Router is a router for React 9.1 Critical Jan 10, 2026
CVE-2026-21441 urllib3 is an HTTP client library for Python 8.9 High Jan 7, 2026
CVE-2025-14512 Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow 6.5 Medium Dec 11, 2025
CVE-2025-14087 Glib: glib: buffer underflow in gvariant parser leads to heap corruption 5.6 Medium Dec 10, 2025
CVE-2025-13601 Glib: integer overflow in in g_escape_uri_string() 7.7 High Nov 26, 2025
CVE-2025-10911 Libxslt: use-after-free with key data stored cross-rvt 5.5 Medium Sep 25, 2025
CVE-2025-9900 Libtiff: libtiff write-what-where 8.8 High Sep 23, 2025
CVE-2025-8941 A flaw was found in linux-pam 7.8 High Aug 13, 2025

Other Red Hat products