Vulnérabilités de Red Hat Red Hat Developer Hub 1.9

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-41673	xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module	8.7 Élevée	7 mai 2026
CVE-2026-41672	xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module	8.7 Élevée	7 mai 2026
CVE-2026-6322	fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them…	7.5 Élevée	5 mai 2026
CVE-2026-6321	fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize()…	7.5 Élevée	4 mai 2026
CVE-2026-24781	vm2 is an open source vm/sandbox for Node.js	9.8 Critique	4 mai 2026
CVE-2026-42039	Axios is a promise based HTTP client for the browser and Node.js	6.9 Moyenne	24 avr. 2026
CVE-2026-42041	Axios is a promise based HTTP client for the browser and Node.js	4.8 Moyenne	24 avr. 2026
CVE-2026-42043	Axios is a promise based HTTP client for the browser and Node.js	7.2 Élevée	24 avr. 2026
CVE-2026-42044	Axios is a promise based HTTP client for the browser and Node.js	6.5 Moyenne	24 avr. 2026
CVE-2026-42033	Axios is a promise based HTTP client for the browser and Node.js	7.4 Élevée	24 avr. 2026
CVE-2026-40895	follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows…	6.9 Moyenne	21 avr. 2026
CVE-2026-41242	protobufjs compiles protobuf definitions into JavaScript (JS) functions	9.4 Critique	18 avr. 2026
CVE-2026-40175	Axios is a promise based HTTP client for the browser and Node.js	4.8 Moyenne	10 avr. 2026
CVE-2026-39983	basic-ftp is an FTP client for Node.js	8.6 Élevée	9 avr. 2026
CVE-2025-62718	Axios is a promise based HTTP client for the browser and Node.js	6.3 Moyenne	9 avr. 2026
CVE-2026-32280	During chain building, the amount of work that is done is not correctly limited when a large number of intermediate…	7.5 Élevée	8 avr. 2026
CVE-2026-4800	The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same…	8.1 Élevée	31 mars 2026
CVE-2026-33896	Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript	7.4 Élevée	27 mars 2026
CVE-2026-33895	Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript	7.5 Élevée	27 mars 2026
CVE-2026-33894	Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript	7.5 Élevée	27 mars 2026
CVE-2026-33891	Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript	7.5 Élevée	27 mars 2026
CVE-2026-4926	Impact: A bad regular expression is generated any time you have multiple sequential optional groups (curly brace…	7.5 Élevée	26 mars 2026
CVE-2026-33228	flatted is a circular JSON parser	8.9 Élevée	20 mars 2026
CVE-2026-33186	gRPC-Go is the Go language implementation of gRPC	9.1 Critique	20 mars 2026
CVE-2026-2229	ImpactThe undici WebSocket client is vulnerable to a denial-of-service attack due to improper validation of…	7.5 Élevée	12 mars 2026

Autres produits Red Hat