Vulnérabilités de Red Hat Red Hat Developer Hub 1.10
Votre version est-elle touchée ?
Liste des CVE
| CVE | Résumé | Score | Publiée |
|---|---|---|---|
| CVE-2026-13676 | fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs | 7.5 Élevée | 29 juin 2026 |
| CVE-2026-9697 | Impact: undici's ProxyAgent silently drops the requestTls option when configured with a SOCKS5 proxy URI (socks5:// or… | 7.4 Élevée | 17 juin 2026 |
| CVE-2026-6734 | Impact: When using Socks5ProxyAgent, undici reuses a single connection pool across different origins without verifying… | 7.5 Élevée | 17 juin 2026 |
| CVE-2026-12151 | Impact: The undici WebSocket client enforces maxPayloadSize on the cumulative byte count of fragments in a message but… | 7.5 Élevée | 17 juin 2026 |
| CVE-2026-48779 | ws is an open source WebSocket client and server for Node.js | 7.5 Élevée | 16 juin 2026 |
| CVE-2026-12143 | form-data is a library for creating readable multipart/form-data streams | 8.7 Élevée | 12 juin 2026 |
| CVE-2026-44486 | Axios is a promise based HTTP client for the browser and Node.js | 7.5 Élevée | 11 juin 2026 |
| CVE-2026-44487 | Axios is a promise based HTTP client for the browser and Node.js | 8.2 Élevée | 11 juin 2026 |
| CVE-2026-44488 | Axios is a promise based HTTP client for the browser and Node.js | 7.5 Élevée | 11 juin 2026 |
| CVE-2026-44496 | Axios is a promise based HTTP client for the browser and Node.js | 7.5 Élevée | 11 juin 2026 |
| CVE-2026-44495 | Axios is a promise based HTTP client for the browser and Node.js | 7.0 Élevée | 11 juin 2026 |
| CVE-2026-44494 | Axios is a promise based HTTP client for the browser and Node.js | 8.7 Élevée | 11 juin 2026 |
| CVE-2026-44492 | Axios is a promise based HTTP client for the browser and Node.js | 8.6 Élevée | 11 juin 2026 |
| CVE-2026-46625 | JavaScript Cookie is a JavaScript API for handling cookies, client-side | 7.5 Élevée | 10 juin 2026 |
| CVE-2026-9277 | shell-quote's `quote()` function did not validate object-token inputs against the operator model used by `parse()` | 8.1 Élevée | 22 mai 2026 |
| CVE-2026-45736 | ws is an open source WebSocket client and server for Node.js | 4.4 Moyenne | 15 mai 2026 |
| CVE-2026-42338 | ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript | 5.3 Moyenne | 12 mai 2026 |
| CVE-2026-39820 | Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion… | 7.5 Élevée | 7 mai 2026 |
| CVE-2026-42499 | Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322 | 7.5 Élevée | 7 mai 2026 |
| CVE-2026-6322 | fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them… | 7.5 Élevée | 5 mai 2026 |
| CVE-2026-24781 | vm2 is an open source vm/sandbox for Node.js | 9.8 Critique | 4 mai 2026 |
Autres produits Red Hat
Red Hat Enterprise Linux 9 1865
Red Hat Enterprise Linux 8 1839
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1455
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 629
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433