Aller au contenu

Vulnérabilités de Red Hat Migration Toolkit for Containers

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-114406 Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns 6.8 Moyenne 21 oct. 2026
CVE-2026-92982 A flaw was found in Ansible Operator Plugins 8.5 Élevée 15 oct. 2026
CVE-2026-19582 In binutils 2.46.1 and prior versions, a victim who opens a crafted PE file using binutils could execute arbitrary… 0.0 Non notée 20 août 2026
CVE-2026-13676 fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs 7.5 Élevée 29 juin 2026
CVE-2026-48779 ws is an open source WebSocket client and server for Node.js 7.5 Élevée 16 juin 2026
CVE-2026-12143 form-data is a library for creating readable multipart/form-data streams 8.7 Élevée 12 juin 2026
CVE-2026-44486 Axios is a promise based HTTP client for the browser and Node.js 7.5 Élevée 11 juin 2026
CVE-2026-44487 Axios is a promise based HTTP client for the browser and Node.js 8.2 Élevée 11 juin 2026
CVE-2026-44488 Axios is a promise based HTTP client for the browser and Node.js 7.5 Élevée 11 juin 2026
CVE-2026-44496 Axios is a promise based HTTP client for the browser and Node.js 7.5 Élevée 11 juin 2026
CVE-2026-44495 Axios is a promise based HTTP client for the browser and Node.js 7.0 Élevée 11 juin 2026
CVE-2026-44494 Axios is a promise based HTTP client for the browser and Node.js 8.7 Élevée 11 juin 2026
CVE-2026-44492 Axios is a promise based HTTP client for the browser and Node.js 8.6 Élevée 11 juin 2026
CVE-2026-27145 (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name… 6.5 Moyenne 2 juin 2026
CVE-2024-52011 launch-editor allows users to open files with line numbers in editor from Node.js 7.5 Élevée 1 juin 2026
CVE-2026-45292 opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing… 5.3 Moyenne 28 mai 2026
CVE-2026-39821 The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label 9.6 Critique 22 mai 2026
CVE-2026-9277 shell-quote's `quote()` function did not validate object-token inputs against the operator model used by `parse()` 8.1 Élevée 22 mai 2026
CVE-2026-45736 ws is an open source WebSocket client and server for Node.js 4.4 Moyenne 15 mai 2026
CVE-2026-44432 urllib3 is an HTTP client library for Python 8.9 Élevée 13 mai 2026
CVE-2026-42338 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript 5.3 Moyenne 12 mai 2026
CVE-2026-42264 Axios is a promise based HTTP client for the browser and Node.js 7.4 Élevée 8 mai 2026
CVE-2026-33811 When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a… 7.5 Élevée 7 mai 2026
CVE-2026-39820 Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion… 7.5 Élevée 7 mai 2026
CVE-2026-42499 Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322 7.5 Élevée 7 mai 2026

Autres produits Red Hat