Vulnerabilities of Red Hat Self-service automation portal 2
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-44009 | vm2: Sandbox Breakout Through Null Proto Exception | 9.8 Critical | May 13, 2026 |
| CVE-2026-44008 | vm2 has sandbox breakout via `neutralizeArraySpeciesBatch` | 9.8 Critical | May 13, 2026 |
| CVE-2026-44007 | vm2: nesting: true bypasses require: false, allowing sandbox escape to arbitrary OS command execution | 9.1 Critical | May 13, 2026 |
| CVE-2026-44006 | vm2 is an open source vm/sandbox for Node.js | 10.0 Critical | May 13, 2026 |
| CVE-2026-44004 | vm2 is an open source vm/sandbox for Node.js | 7.5 High | May 13, 2026 |
| CVE-2026-44001 | vm2 is an open source vm/sandbox for Node.js | 8.6 High | May 13, 2026 |
| CVE-2026-43999 | vm2 is an open source vm/sandbox for Node.js | 9.9 Critical | May 13, 2026 |
| CVE-2026-43998 | vm2 is an open source vm/sandbox for Node.js | 8.5 High | May 13, 2026 |
| CVE-2026-43997 | vm2 is an open source vm/sandbox for Node.js | 10.0 Critical | May 13, 2026 |
| CVE-2026-44293 | protobufjs compiles protobuf definitions into JavaScript (JS) functions | 7.7 High | May 13, 2026 |
| CVE-2026-44289 | protobufjs compiles protobuf definitions into JavaScript (JS) functions | 7.5 High | May 13, 2026 |
| CVE-2026-42338 | ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript | 5.3 Medium | May 12, 2026 |
| CVE-2026-42264 | Axios is a promise based HTTP client for the browser and Node.js | 7.4 High | May 8, 2026 |
| CVE-2026-41139 | Math.js is an extensive math library for JavaScript and Node.js | 8.8 High | May 7, 2026 |
| CVE-2026-41675 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module | 8.7 High | May 7, 2026 |
| CVE-2026-41674 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module | 8.7 High | May 7, 2026 |
| CVE-2026-41673 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module | 8.7 High | May 7, 2026 |
| CVE-2026-41672 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module | 8.7 High | May 7, 2026 |
| CVE-2026-6322 | fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them… | 7.5 High | May 5, 2026 |
| CVE-2026-26956 | vm2 is an open source vm/sandbox for Node.js | 9.8 Critical | May 4, 2026 |
| CVE-2026-26332 | vm2 is an open source vm/sandbox for Node.js | 9.8 Critical | May 4, 2026 |
| CVE-2026-24120 | vm2 is an open source vm/sandbox for Node.js | 9.8 Critical | May 4, 2026 |
| CVE-2026-24118 | vm2 is an open source vm/sandbox for Node.js | 9.8 Critical | May 4, 2026 |
| CVE-2026-42039 | Axios is a promise based HTTP client for the browser and Node.js | 6.9 Medium | Apr 24, 2026 |
| CVE-2026-42041 | Axios is a promise based HTTP client for the browser and Node.js | 4.8 Medium | Apr 24, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1864
Red Hat Enterprise Linux 8 1838
Red Hat Enterprise Linux 7 1501
Red Hat Enterprise Linux 10 1454
Red Hat Enterprise Linux 6 1339
Red Hat OpenShift Container Platform 4 629
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433