Vulnérabilités de Red Hat Red Hat 3scale API Management Platform 2

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-40895	follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows…	6.9 Moyenne	21 avr. 2026
CVE-2026-40175	Axios is a promise based HTTP client for the browser and Node.js	4.8 Moyenne	10 avr. 2026
CVE-2025-62718	Axios is a promise based HTTP client for the browser and Node.js	6.3 Moyenne	9 avr. 2026
CVE-2026-32280	During chain building, the amount of work that is done is not correctly limited when a large number of intermediate…	7.5 Élevée	8 avr. 2026
CVE-2026-32283	If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection…	7.5 Élevée	8 avr. 2026
CVE-2026-33810	When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to…	7.5 Élevée	8 avr. 2026
CVE-2026-33815	Memory-safety vulnerability in github.com/jackc/pgx/v5	9.8 Critique	7 avr. 2026
CVE-2026-33816	Memory-safety vulnerability in github.com/jackc/pgx/v5	9.8 Critique	7 avr. 2026
CVE-2026-34827	Rack is a modular Ruby web server interface	7.5 Élevée	2 avr. 2026
CVE-2026-34829	Rack is a modular Ruby web server interface	7.5 Élevée	2 avr. 2026
CVE-2026-4800	The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same…	8.1 Élevée	31 mars 2026
CVE-2026-33195	Active Storage allows users to attach cloud and local files in Rails applications	8.0 Élevée	23 mars 2026
CVE-2026-33228	flatted is a circular JSON parser	8.9 Élevée	20 mars 2026
CVE-2026-33210	Ruby JSON is a JSON implementation for Ruby	8.3 Élevée	20 mars 2026
CVE-2026-33186	gRPC-Go is the Go language implementation of gRPC	9.1 Critique	20 mars 2026
CVE-2026-32141	flatted is a circular JSON parser	7.5 Élevée	12 mars 2026
CVE-2026-29786	node-tar is a full-featured Tar for Node.js	8.2 Élevée	7 mars 2026
CVE-2026-25679	url.Parse insufficiently validated the host/authority component and accepted some invalid URLs	7.5 Élevée	6 mars 2026
CVE-2026-27137	When verifying a certificate chain which contains a certificate containing multiple email address constraints which…	7.5 Élevée	6 mars 2026
CVE-2026-29063	Immutable.js provides many Persistent Immutable data structures	8.7 Élevée	6 mars 2026
CVE-2026-29074	SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files	7.5 Élevée	6 mars 2026
CVE-2026-22860	Rack is a modular Ruby web server interface	7.5 Élevée	18 févr. 2026
CVE-2025-69873	ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the…	2.9 Faible	11 févr. 2026
CVE-2026-25639	Axios is a promise based HTTP client for the browser and Node.js	7.5 Élevée	9 févr. 2026
CVE-2025-24293	# Active Storage allowed transformation methods potentially unsafe Active Storage attempts to prevent the use of…	9.2 Critique	30 janv. 2026

Autres produits Red Hat