Aller au contenu

Vulnérabilités de Red Hat Red Hat build of Apache Camel - HawtIO 4

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-44488 Axios is a promise based HTTP client for the browser and Node.js 7.5 Élevée 11 juin 2026
CVE-2026-44496 Axios is a promise based HTTP client for the browser and Node.js 7.5 Élevée 11 juin 2026
CVE-2026-44495 Axios is a promise based HTTP client for the browser and Node.js 7.0 Élevée 11 juin 2026
CVE-2026-44494 Axios is a promise based HTTP client for the browser and Node.js 8.7 Élevée 11 juin 2026
CVE-2026-44492 Axios is a promise based HTTP client for the browser and Node.js 8.6 Élevée 11 juin 2026
CVE-2026-40984 In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service… 7.5 Élevée 9 juin 2026
CVE-2026-40983 In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service… 7.5 Élevée 9 juin 2026
CVE-2024-52011 launch-editor allows users to open files with line numbers in editor from Node.js 7.5 Élevée 1 juin 2026
CVE-2026-9277 shell-quote's `quote()` function did not validate object-token inputs against the operator model used by `parse()` 8.1 Élevée 22 mai 2026
CVE-2026-45736 ws is an open source WebSocket client and server for Node.js 4.4 Moyenne 15 mai 2026
CVE-2026-42338 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript 5.3 Moyenne 12 mai 2026
CVE-2026-42264 Axios is a promise based HTTP client for the browser and Node.js 7.4 Élevée 8 mai 2026
CVE-2026-6322 fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them… 7.5 Élevée 5 mai 2026
CVE-2026-40976 In certain circumstances, Spring Boot's default web security is ineffective allowing unauthorized access to all… 9.1 Critique 27 avr. 2026
CVE-2026-33454 The Camel-Mail component is vulnerable to Camel message header injection Non notée 27 avr. 2026
CVE-2026-40542 Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept… Non notée 22 avr. 2026
CVE-2026-22754 Vulnerability in Spring Spring Security 7.5 Élevée 22 avr. 2026
CVE-2026-22747 Vulnerability in Spring Spring Security. SubjectX500PrincipalExtractor does not correctly handle certain malformed X.509… 6.8 Moyenne 22 avr. 2026
CVE-2026-40895 follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows… 6.9 Moyenne 21 avr. 2026
CVE-2026-40175 Axios is a promise based HTTP client for the browser and Node.js 4.8 Moyenne 10 avr. 2026
CVE-2025-62718 Axios is a promise based HTTP client for the browser and Node.js 6.3 Moyenne 9 avr. 2026
CVE-2026-32283 If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection… 7.5 Élevée 8 avr. 2026
CVE-2026-4800 The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same… 8.1 Élevée 31 mars 2026
CVE-2026-33896 Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript 7.4 Élevée 27 mars 2026
CVE-2026-33895 Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript 7.5 Élevée 27 mars 2026

Autres produits Red Hat