Vulnérabilités de Red Hat Red Hat OpenShift Dev Spaces 3.28

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-42587	Netty is an asynchronous, event-driven network application framework	7.5 Élevée	13 mai 2026
CVE-2026-42584	Netty is an asynchronous, event-driven network application framework	7.3 Élevée	13 mai 2026
CVE-2026-42579	Netty is an asynchronous, event-driven network application framework	7.5 Élevée	13 mai 2026
CVE-2026-42578	Netty is an asynchronous, event-driven network application framework	2.9 Faible	13 mai 2026
CVE-2026-42581	Netty is an asynchronous, event-driven network application framework	5.8 Moyenne	13 mai 2026
CVE-2026-6321	fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize()…	7.5 Élevée	4 mai 2026
CVE-2026-40912	Traefik is an HTTP reverse proxy and load balancer	7.8 Élevée	30 avr. 2026
CVE-2026-39858	Traefik is an HTTP reverse proxy and load balancer	7.8 Élevée	30 avr. 2026
CVE-2026-35051	Traefik is an HTTP reverse proxy and load balancer	7.8 Élevée	30 avr. 2026
CVE-2026-40975	Values produced by ${random.value} are not suitable for use as secrets	4.8 Moyenne	27 avr. 2026
CVE-2026-42039	Axios is a promise based HTTP client for the browser and Node.js	6.9 Moyenne	24 avr. 2026
CVE-2026-42041	Axios is a promise based HTTP client for the browser and Node.js	4.8 Moyenne	24 avr. 2026
CVE-2026-42043	Axios is a promise based HTTP client for the browser and Node.js	7.2 Élevée	24 avr. 2026
CVE-2026-42044	Axios is a promise based HTTP client for the browser and Node.js	6.5 Moyenne	24 avr. 2026
CVE-2026-42033	Axios is a promise based HTTP client for the browser and Node.js	7.4 Élevée	24 avr. 2026
CVE-2026-40895	follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows…	6.9 Moyenne	21 avr. 2026
CVE-2026-40611	Let's Encrypt client and ACME library written in Go (Lego)	8.8 Élevée	21 avr. 2026
CVE-2026-40478	Thymeleaf is a server-side Java template engine for web and standalone environments	9.1 Critique	17 avr. 2026
CVE-2026-40477	Thymeleaf is a server-side Java template engine for web and standalone environments	9.1 Critique	17 avr. 2026
CVE-2026-5588	Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc	6.3 Moyenne	15 avr. 2026
CVE-2026-0636	Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the…	5.5 Moyenne	15 avr. 2026
CVE-2025-14813	: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc	9.3 Critique	15 avr. 2026
CVE-2026-32280	During chain building, the amount of work that is done is not correctly limited when a large number of intermediate…	7.5 Élevée	8 avr. 2026
CVE-2026-33810	When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to…	7.5 Élevée	8 avr. 2026
CVE-2026-34742	The Go MCP SDK used Go's standard encoding/json	7.6 Élevée	2 avr. 2026

Autres produits Red Hat