Vulnérabilités de Red Hat OpenShift Service Mesh 2

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-33997	Moby is an open source container framework	6.8 Moyenne	31 mars 2026
CVE-2026-4926	Impact: A bad regular expression is generated any time you have multiple sequential optional groups (curly brace…	7.5 Élevée	26 mars 2026
CVE-2026-33186	gRPC-Go is the Go language implementation of gRPC	9.1 Critique	20 mars 2026
CVE-2026-31837	Istio is an open platform to connect, manage, and secure microservices	8.7 Élevée	10 mars 2026
CVE-2026-25679	url.Parse insufficiently validated the host/authority component and accepted some invalid URLs	7.5 Élevée	6 mars 2026
CVE-2026-27137	When verifying a certificate chain which contains a certificate containing multiple email address constraints which…	7.5 Élevée	6 mars 2026
CVE-2025-15558	Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not…	7.0 Élevée	4 mars 2026
CVE-2025-69873	ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the…	2.9 Faible	11 févr. 2026
CVE-2025-61726	The net/url package does not set a limit on the number of query parameters in a query	7.5 Élevée	28 janv. 2026
CVE-2026-24049	wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427	7.1 Élevée	22 janv. 2026
CVE-2025-13465	The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution	6.9 Moyenne	21 janv. 2026
CVE-2025-56005	An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via…	9.8 Critique	20 janv. 2026
CVE-2026-22029	React Router is a router for React	8.0 Élevée	10 janv. 2026
CVE-2025-61686	React Router is a router for React	9.1 Critique	10 janv. 2026
CVE-2025-70974	Fastjson before 1.2.48 mishandles autoType because, when an @type key is in a JSON document, and the value of that key…	10.0 Critique	9 janv. 2026
CVE-2026-21441	urllib3 is an HTTP client library for Python	8.9 Élevée	7 janv. 2026
CVE-2025-69223	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python	7.5 Élevée	5 janv. 2026
CVE-2024-11831	Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript	5.4 Moyenne	10 févr. 2025
CVE-2025-0754	The vulnerability was found in OpenShift Service Mesh 2.6.3 and 2.5.6	4.3 Moyenne	28 janv. 2025
CVE-2025-0752	A flaw was found in OpenShift Service Mesh 2.6.3 and 2.5.6	7.1 Élevée	28 janv. 2025

Autres produits Red Hat