Vulnerabilities of Red Hat Self-service automation portal 2

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-42043	Axios is a promise based HTTP client for the browser and Node.js	7.2 High	Apr 24, 2026
CVE-2026-42044	Axios is a promise based HTTP client for the browser and Node.js	6.5 Medium	Apr 24, 2026
CVE-2026-42033	Axios is a promise based HTTP client for the browser and Node.js	7.4 High	Apr 24, 2026
CVE-2026-40897	Math.js is an extensive math library for JavaScript and Node.js	8.8 High	Apr 24, 2026
CVE-2026-40895	follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows…	6.9 Medium	Apr 21, 2026
CVE-2026-41242	protobufjs compiles protobuf definitions into JavaScript (JS) functions	9.4 Critical	Apr 18, 2026
CVE-2026-40175	Axios is a promise based HTTP client for the browser and Node.js	4.8 Medium	Apr 10, 2026
CVE-2026-39983	basic-ftp is an FTP client for Node.js	8.6 High	Apr 9, 2026
CVE-2025-62718	Axios is a promise based HTTP client for the browser and Node.js	6.3 Medium	Apr 9, 2026
CVE-2026-34601	xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module	7.5 High	Apr 2, 2026
CVE-2026-4800	The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same…	8.1 High	Mar 31, 2026
CVE-2026-4926	Impact: A bad regular expression is generated any time you have multiple sequential optional groups (curly brace…	7.5 High	Mar 26, 2026
CVE-2026-2229	ImpactThe undici WebSocket client is vulnerable to a denial-of-service attack due to improper validation of…	7.5 High	Mar 12, 2026
CVE-2026-1528	ImpactA server can reply with a WebSocket frame using the 64-bit length form and an extremely large length	7.5 High	Mar 12, 2026
CVE-2026-1526	The undici WebSocket client is vulnerable to a denial-of-service attack via unbounded memory consumption during…	7.5 High	Mar 12, 2026
CVE-2026-29186	Backstage is an open framework for building developer portals	7.7 High	Mar 7, 2026
CVE-2026-29063	Immutable.js provides many Persistent Immutable data structures	8.7 High	Mar 6, 2026
CVE-2026-29074	SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files	7.5 High	Mar 6, 2026
CVE-2026-3520	Multer is a node.js middleware for handling `multipart/form-data`	8.7 High	Mar 4, 2026
CVE-2026-3304	Multer is a node.js middleware for handling `multipart/form-data`	8.7 High	Feb 27, 2026
CVE-2026-2359	Multer is a node.js middleware for handling `multipart/form-data`	8.7 High	Feb 27, 2026
CVE-2026-27959	Koa is middleware for Node.js using ES2017 async functions	7.5 High	Feb 26, 2026
CVE-2026-27606	Rollup is a module bundler for JavaScript	8.8 High	Feb 25, 2026
CVE-2026-25896	fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based…	9.3 Critical	Feb 20, 2026
CVE-2026-26278	fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based…	7.5 High	Feb 19, 2026

Other Red Hat products