Vulnérabilités de Red Hat multicluster engine for Kubernetes 2.10
Votre version est-elle touchée ?
Liste des CVE
| CVE | Résumé | Score | Publiée |
|---|---|---|---|
| CVE-2026-39828 | When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were… | 6.3 Moyenne | 22 mai 2026 |
| CVE-2026-33811 | When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a… | 7.5 Élevée | 7 mai 2026 |
| CVE-2026-7163 | A vulnerability in the assisted-service REST API, an optional Assisted Installer (assisted-service) component in the… | 6.1 Moyenne | 30 avr. 2026 |
| CVE-2026-42039 | Axios is a promise based HTTP client for the browser and Node.js | 6.9 Moyenne | 24 avr. 2026 |
| CVE-2026-42041 | Axios is a promise based HTTP client for the browser and Node.js | 4.8 Moyenne | 24 avr. 2026 |
| CVE-2026-42043 | Axios is a promise based HTTP client for the browser and Node.js | 7.2 Élevée | 24 avr. 2026 |
| CVE-2026-42044 | Axios is a promise based HTTP client for the browser and Node.js | 6.5 Moyenne | 24 avr. 2026 |
| CVE-2026-42033 | Axios is a promise based HTTP client for the browser and Node.js | 7.4 Élevée | 24 avr. 2026 |
| CVE-2026-40895 | follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows… | 6.9 Moyenne | 21 avr. 2026 |
| CVE-2026-35469 | spdystream is a Go library for multiplexing streams over SPDY connections | 8.7 Élevée | 16 avr. 2026 |
| CVE-2026-40175 | Axios is a promise based HTTP client for the browser and Node.js | 4.8 Moyenne | 10 avr. 2026 |
| CVE-2026-32280 | During chain building, the amount of work that is done is not correctly limited when a large number of intermediate… | 7.5 Élevée | 8 avr. 2026 |
| CVE-2026-4740 | A flaw was found in Open Cluster Management (OCM), the technology underlying Red Hat Advanced Cluster Management (ACM) | 8.2 Élevée | 7 avr. 2026 |
| CVE-2026-34986 | Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including… | 7.5 Élevée | 6 avr. 2026 |
| CVE-2026-32285 | The Delete function fails to properly validate offsets when processing malformed JSON input | 7.5 Élevée | 26 mars 2026 |
| CVE-2026-33186 | gRPC-Go is the Go language implementation of gRPC | 9.1 Critique | 20 mars 2026 |
| CVE-2026-29063 | Immutable.js provides many Persistent Immutable data structures | 8.7 Élevée | 6 mars 2026 |
| CVE-2026-25639 | Axios is a promise based HTTP client for the browser and Node.js | 7.5 Élevée | 9 févr. 2026 |
| CVE-2025-61726 | The net/url package does not set a limit on the number of query parameters in a query | 7.5 Élevée | 28 janv. 2026 |
| CVE-2025-13465 | The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution | 6.9 Moyenne | 21 janv. 2026 |
| CVE-2026-22029 | React Router is a router for React | 8.0 Élevée | 10 janv. 2026 |
Autres produits Red Hat
Red Hat Enterprise Linux 9 1865
Red Hat Enterprise Linux 8 1839
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1455
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 629
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433