Vulnerabilities of Red Hat Red Hat OpenShift Dev Spaces

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-12143	form-data is a library for creating readable multipart/form-data streams	8.7 High	Jun 12, 2026
CVE-2026-50010	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-48059	Netty is a network application framework for development of protocol servers and clients	8.7 High	Jun 12, 2026
CVE-2026-48043	Netty is a network application framework for development of protocol servers and clients	5.3 Medium	Jun 12, 2026
CVE-2026-47691	Netty is a network application framework for development of protocol servers and clients	8.7 High	Jun 12, 2026
CVE-2026-45674	Netty is a network application framework for development of protocol servers and clients	8.7 High	Jun 12, 2026
CVE-2026-45416	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-44893	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-44249	Netty is a network application framework for development of protocol servers and clients	8.1 High	Jun 11, 2026
CVE-2026-44486	Axios is a promise based HTTP client for the browser and Node.js	7.5 High	Jun 11, 2026
CVE-2026-44487	Axios is a promise based HTTP client for the browser and Node.js	8.2 High	Jun 11, 2026
CVE-2026-44488	Axios is a promise based HTTP client for the browser and Node.js	7.5 High	Jun 11, 2026
CVE-2026-44496	Axios is a promise based HTTP client for the browser and Node.js	7.5 High	Jun 11, 2026
CVE-2026-44495	Axios is a promise based HTTP client for the browser and Node.js	7.0 High	Jun 11, 2026
CVE-2026-44494	Axios is a promise based HTTP client for the browser and Node.js	8.7 High	Jun 11, 2026
CVE-2026-44492	Axios is a promise based HTTP client for the browser and Node.js	8.6 High	Jun 11, 2026
CVE-2025-71319	image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block…	8.7 High	Jun 9, 2026
CVE-2026-40984	In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service…	7.5 High	Jun 9, 2026
CVE-2026-40983	In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service…	7.5 High	Jun 9, 2026
CVE-2026-27145	(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name…	6.5 Medium	Jun 2, 2026
CVE-2024-52011	launch-editor allows users to open files with line numbers in editor from Node.js	7.5 High	Jun 1, 2026
CVE-2026-8643	pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved…	4.1 Medium	Jun 1, 2026
CVE-2026-45292	opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing…	5.3 Medium	May 28, 2026
CVE-2026-39821	The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label	9.6 Critical	May 22, 2026
CVE-2026-9277	shell-quote's `quote()` function did not validate object-token inputs against the operator model used by `parse()`	8.1 High	May 22, 2026

Other Red Hat products