Aller au contenu

Vulnérabilités de Red Hat Red Hat Satellite 6.18

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-13676 fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs 7.5 Élevée 29 juin 2026
CVE-2026-9073 A flaw was found in foreman-mcp-server 6.2 Moyenne 23 juin 2026
CVE-2026-12112 A flaw was found in the foreman-mcp-server 7.8 Élevée 23 juin 2026
CVE-2026-44990 ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer… 9.3 Critique 12 juin 2026
CVE-2026-12143 form-data is a library for creating readable multipart/form-data streams 8.7 Élevée 12 juin 2026
CVE-2026-48526 PyJWT is a JSON Web Token implementation in Python 7.4 Élevée 28 mai 2026
CVE-2026-48710 Exploitée Kludex Starlette HTTP Request/Response Smuggling Vulnerability 6.5 Moyenne 26 mai 2026
CVE-2026-39821 The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label 9.6 Critique 22 mai 2026
CVE-2026-9277 shell-quote's `quote()` function did not validate object-token inputs against the operator model used by `parse()` 8.1 Élevée 22 mai 2026
CVE-2026-44432 urllib3 is an HTTP client library for Python 8.9 Élevée 13 mai 2026
CVE-2026-42945 NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module 8.1 Élevée 13 mai 2026
CVE-2026-33811 When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a… 7.5 Élevée 7 mai 2026
CVE-2026-6322 fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them… 7.5 Élevée 5 mai 2026
CVE-2026-6321 fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize()… 7.5 Élevée 4 mai 2026
CVE-2026-42039 Axios is a promise based HTTP client for the browser and Node.js 6.9 Moyenne 24 avr. 2026
CVE-2026-42041 Axios is a promise based HTTP client for the browser and Node.js 4.8 Moyenne 24 avr. 2026
CVE-2026-42043 Axios is a promise based HTTP client for the browser and Node.js 7.2 Élevée 24 avr. 2026
CVE-2026-42044 Axios is a promise based HTTP client for the browser and Node.js 6.5 Moyenne 24 avr. 2026
CVE-2026-42033 Axios is a promise based HTTP client for the browser and Node.js 7.4 Élevée 24 avr. 2026
CVE-2026-40175 Axios is a promise based HTTP client for the browser and Node.js 4.8 Moyenne 10 avr. 2026
CVE-2026-34444 Lupa integrates the runtimes of Lua or LuaJIT2 into CPython 7.9 Élevée 6 avr. 2026
CVE-2026-32871 FastMCP is a Pythonic way to build MCP servers and clients 10.0 Critique 2 avr. 2026
CVE-2026-4800 The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same… 8.1 Élevée 31 mars 2026
CVE-2025-69196 FastMCP is the standard framework for building MCP applications 7.4 Élevée 16 mars 2026
CVE-2026-32597 PyJWT is a JSON Web Token implementation in Python 7.5 Élevée 12 mars 2026

Autres produits Red Hat