Vulnérabilités de Red Hat Red Hat Developer Hub

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-33810	When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to…	7.5 Élevée	8 avr. 2026
CVE-2026-34601	xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module	7.5 Élevée	2 avr. 2026
CVE-2026-4800	The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same…	8.1 Élevée	31 mars 2026
CVE-2026-33941	Handlebars provides the power necessary to let users build semantic templates	8.3 Élevée	27 mars 2026
CVE-2026-33938	Handlebars provides the power necessary to let users build semantic templates	8.1 Élevée	27 mars 2026
CVE-2026-33937	Handlebars provides the power necessary to let users build semantic templates	9.8 Critique	27 mars 2026
CVE-2026-4926	Impact: A bad regular expression is generated any time you have multiple sequential optional groups (curly brace…	7.5 Élevée	26 mars 2026
CVE-2026-33001	Jenkins 2.554 and earlier, LTS 2.541.2 and earlier does not safely handle symbolic links during the extraction of .tar…	8.8 Élevée	18 mars 2026
CVE-2025-69196	FastMCP is the standard framework for building MCP applications	7.4 Élevée	16 mars 2026
CVE-2026-2229	ImpactThe undici WebSocket client is vulnerable to a denial-of-service attack due to improper validation of…	7.5 Élevée	12 mars 2026
CVE-2026-1528	ImpactA server can reply with a WebSocket frame using the 64-bit length form and an extremely large length	7.5 Élevée	12 mars 2026
CVE-2026-1526	The undici WebSocket client is vulnerable to a denial-of-service attack via unbounded memory consumption during…	7.5 Élevée	12 mars 2026
CVE-2026-27137	When verifying a certificate chain which contains a certificate containing multiple email address constraints which…	7.5 Élevée	6 mars 2026
CVE-2026-2293	A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when…	8.2 Élevée	27 févr. 2026
CVE-2026-27959	Koa is middleware for Node.js using ES2017 async functions	7.5 Élevée	26 févr. 2026
CVE-2026-26318	systeminformation is a System and OS information library for node.js	8.8 Élevée	19 févr. 2026
CVE-2026-26280	systeminformation is a System and OS information library for node.js	8.4 Élevée	19 févr. 2026
CVE-2026-24842	node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink…	8.2 Élevée	28 janv. 2026
CVE-2026-0775	npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability	7.0 Élevée	23 janv. 2026
CVE-2026-23950	node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3	8.8 Élevée	20 janv. 2026
CVE-2026-23745	node-tar is a Tar for Node.js	8.2 Élevée	16 janv. 2026
CVE-2026-22029	React Router is a router for React	8.0 Élevée	10 janv. 2026
CVE-2025-61686	React Router is a router for React	9.1 Critique	10 janv. 2026
CVE-2026-21441	urllib3 is an HTTP client library for Python	8.9 Élevée	7 janv. 2026
CVE-2025-14874	A flaw was found in Nodemailer	7.5 Élevée	18 déc. 2025

Autres produits Red Hat