Aller au contenu

Vulnérabilités de Red Hat OpenShift Developer Tools and Services 4.21

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-57281 Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not reject Groovy AST transformation annotations… 7.5 Élevée 24 juin 2026
CVE-2026-53437 Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately… 4.3 Moyenne 10 juin 2026
CVE-2026-53435 In Jenkins 2.567 and earlier, LTS 2.555.2 and earlier, it is possible for attackers to have Jenkins deserialize… 8.8 Élevée 10 juin 2026
CVE-2026-40542 Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept… Non notée 22 avr. 2026
CVE-2026-3505 Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the… 8.7 Élevée 15 avr. 2026
CVE-2026-5588 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc 6.3 Moyenne 15 avr. 2026
CVE-2026-0636 Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the… 5.5 Moyenne 15 avr. 2026
CVE-2025-14813 : Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc 9.3 Critique 15 avr. 2026
CVE-2026-2332 In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to… 7.4 Élevée 14 avr. 2026
CVE-2025-67030 Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before… 8.8 Élevée 25 mars 2026
CVE-2026-33001 Jenkins 2.554 and earlier, LTS 2.541.2 and earlier does not safely handle symbolic links during the extraction of .tar… 8.8 Élevée 18 mars 2026
CVE-2026-1605 In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed… 7.5 Élevée 5 mars 2026

Autres produits Red Hat