Vulnérabilités de Red Hat Red Hat Advanced Cluster Management for Kubernetes 2

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2025-13465	The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution	6.9 Moyenne	21 janv. 2026
CVE-2026-23950	node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3	8.8 Élevée	20 janv. 2026
CVE-2026-23745	node-tar is a Tar for Node.js	8.2 Élevée	16 janv. 2026
CVE-2026-22029	React Router is a router for React	8.0 Élevée	10 janv. 2026
CVE-2025-61686	React Router is a router for React	9.1 Critique	10 janv. 2026
CVE-2026-21441	urllib3 is an HTTP client library for Python	8.9 Élevée	7 janv. 2026
CVE-2025-14874	A flaw was found in Nodemailer	7.5 Élevée	18 déc. 2025
CVE-2025-13033	A vulnerability was identified in the email parsing library due to improper handling of specially formatted recipient…	7.5 Élevée	14 nov. 2025
CVE-2025-10894	Malicious code was inserted into the Nx (build system) package and several related plugins	9.6 Critique	24 sept. 2025
CVE-2025-7195	Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used…	6.4 Moyenne	7 août 2025
CVE-2025-8556	A flaw was found in CIRCL's implementation of the FourQ elliptic curve	3.7 Faible	6 août 2025
CVE-2025-6017	A flaw was found in Red Hat Advanced Cluster Management through versions 2.10, before 2.10.7, 2.11, before 2.11.4, and…	5.5 Moyenne	2 juil. 2025
CVE-2025-2241	A flaw was found in Hive, a component of Multicluster Engine (MCE) and Advanced Cluster Management (ACM)	8.2 Élevée	17 mars 2025
CVE-2024-11831	Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript	5.4 Moyenne	10 févr. 2025
CVE-2024-9779	A flaw was found in Open Cluster Management (OCM) when a user has access to the worker nodes which contain the…	7.5 Élevée	17 déc. 2024
CVE-2024-5042	A flaw was found in the Submariner project	6.6 Moyenne	17 mai 2024
CVE-2024-3727	Containers/image: digest type does not guarantee valid type	8.3 Élevée	9 mai 2024
CVE-2024-1139	Cluster-monitoring-operator: credentials leak	7.7 Élevée	25 avr. 2024
CVE-2024-0874	A flaw was found in coredns	5.3 Moyenne	25 avr. 2024
CVE-2022-3248	A flaw was found in OpenShift API, as admission checks do not enforce "custom-host" permissions	4.4 Moyenne	5 oct. 2023
CVE-2023-3089	A compliance problem was found in the Red Hat OpenShift Container Platform	7.0 Élevée	5 juil. 2023

Autres produits Red Hat