Vulnerabilities of Red Hat Red Hat OpenShift Dev Spaces

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-0775	npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability	7.0 High	Jan 23, 2026
CVE-2026-24049	wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427	7.1 High	Jan 22, 2026
CVE-2025-13465	The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution	6.9 Medium	Jan 21, 2026
CVE-2025-12548	A flaw was found in Eclipse Che che-machine-exec	9.0 Critical	Jan 13, 2026
CVE-2026-22029	React Router is a router for React	8.0 High	Jan 10, 2026
CVE-2025-61686	React Router is a router for React	9.1 Critical	Jan 10, 2026
CVE-2025-65518	Plesk Obsidian versions 8.0.1 through 18.0.73 are vulnerable to a Denial of Service (DoS) condition	7.5 High	Jan 8, 2026
CVE-2025-50334	An issue in Technitium DNS Server v.13.5 allows a remote attacker to cause a denial of service via the rate-limiting…	7.5 High	Jan 8, 2026
CVE-2026-21441	urllib3 is an HTTP client library for Python	8.9 High	Jan 7, 2026
CVE-2025-57850	A container privilege escalation flaw was found in certain CodeReady Workspaces images	6.4 Medium	Dec 2, 2025
CVE-2025-9566	There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the…	8.1 High	Sep 5, 2025
CVE-2024-11831	Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript	5.4 Medium	Feb 10, 2025
CVE-2024-9355	Golang-fips: golang fips zeroed buffer	6.5 Medium	Oct 1, 2024
CVE-2024-3727	Containers/image: digest type does not guarantee valid type	8.3 High	May 9, 2024
CVE-2024-1394	Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads	7.5 High	Mar 21, 2024

Other Red Hat products