Aller au contenu

Vulnérabilités connues pour Red Hat Network Observability Operator

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-114406 Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns 6.8 Moyenne 21 oct. 2026
CVE-2026-13676 fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs 7.5 Élevée 29 juin 2026
CVE-2026-12143 form-data is a library for creating readable multipart/form-data streams 8.7 Élevée 12 juin 2026
CVE-2026-44486 Axios is a promise based HTTP client for the browser and Node.js 7.5 Élevée 11 juin 2026
CVE-2026-44487 Axios is a promise based HTTP client for the browser and Node.js 8.2 Élevée 11 juin 2026
CVE-2026-44488 Axios is a promise based HTTP client for the browser and Node.js 7.5 Élevée 11 juin 2026
CVE-2026-44496 Axios is a promise based HTTP client for the browser and Node.js 7.5 Élevée 11 juin 2026
CVE-2026-44495 Axios is a promise based HTTP client for the browser and Node.js 7.0 Élevée 11 juin 2026
CVE-2026-44494 Axios is a promise based HTTP client for the browser and Node.js 8.7 Élevée 11 juin 2026
CVE-2026-44492 Axios is a promise based HTTP client for the browser and Node.js 8.6 Élevée 11 juin 2026
CVE-2026-27145 (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name… 6.5 Moyenne 2 juin 2026
CVE-2026-39821 The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label 9.6 Critique 22 mai 2026
CVE-2026-42264 Axios is a promise based HTTP client for the browser and Node.js 7.4 Élevée 8 mai 2026
CVE-2026-33811 When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a… 7.5 Élevée 7 mai 2026
CVE-2026-39820 Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion… 7.5 Élevée 7 mai 2026
CVE-2026-42499 Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322 7.5 Élevée 7 mai 2026
CVE-2026-33814 When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it… 7.5 Élevée 7 mai 2026
CVE-2026-6322 fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them… 7.5 Élevée 5 mai 2026
CVE-2026-42154 Prometheus is an open-source monitoring system and time series database 7.5 Élevée 4 mai 2026
CVE-2026-42151 Prometheus is an open-source monitoring system and time series database 7.5 Élevée 4 mai 2026
CVE-2026-42039 Axios is a promise based HTTP client for the browser and Node.js 6.9 Moyenne 24 avr. 2026
CVE-2026-42044 Axios is a promise based HTTP client for the browser and Node.js 6.5 Moyenne 24 avr. 2026
CVE-2025-62718 Axios is a promise based HTTP client for the browser and Node.js 6.3 Moyenne 9 avr. 2026
CVE-2026-32283 If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection… 7.5 Élevée 8 avr. 2026
CVE-2026-33810 When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to… 7.5 Élevée 8 avr. 2026

Autres produits Red Hat