Aller au contenu

Vulnérabilités de Red Hat Red Hat Trusted Artifact Signer 1.4

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-48779 ws is an open source WebSocket client and server for Node.js 7.5 Élevée 16 juin 2026
CVE-2025-71319 image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block… 8.7 Élevée 9 juin 2026
CVE-2026-42570 Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for… 7.5 Élevée 9 juin 2026
CVE-2026-27145 (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name… 6.5 Moyenne 2 juin 2026
CVE-2026-8643 pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved… 4.1 Moyenne 1 juin 2026
CVE-2026-48526 PyJWT is a JSON Web Token implementation in Python 7.4 Élevée 28 mai 2026
CVE-2026-39821 The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label 9.6 Critique 22 mai 2026
CVE-2026-42508 Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation 9.1 Critique 22 mai 2026
CVE-2026-46595 Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of… 10.0 Critique 22 mai 2026
CVE-2026-39829 The RSA and DSA public key parsers did not enforce size limits on key parameters 7.5 Élevée 22 mai 2026
CVE-2026-39830 A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the… 9.1 Critique 22 mai 2026
CVE-2026-39835 SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be… 5.3 Moyenne 22 mai 2026
CVE-2026-39828 When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were… 6.3 Moyenne 22 mai 2026
CVE-2026-39832 When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not… 9.1 Critique 22 mai 2026
CVE-2026-45736 ws is an open source WebSocket client and server for Node.js 4.4 Moyenne 15 mai 2026
CVE-2026-45109 Next.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routes 7.5 Élevée 13 mai 2026
CVE-2026-44579 Next.js is a React framework for building full-stack web applications 7.5 Élevée 13 mai 2026
CVE-2026-44578 Next.js is a React framework for building full-stack web applications 8.6 Élevée 13 mai 2026
CVE-2026-44577 Next.js is a React framework for building full-stack web applications 5.9 Moyenne 13 mai 2026
CVE-2026-44574 Next.js is a React framework for building full-stack web applications 8.1 Élevée 13 mai 2026
CVE-2026-44575 Next.js is a React framework for building full-stack web applications 7.5 Élevée 13 mai 2026
CVE-2026-44573 Next.js is a React framework for building full-stack web applications 7.5 Élevée 13 mai 2026
CVE-2026-44432 urllib3 is an HTTP client library for Python 8.9 Élevée 13 mai 2026
CVE-2026-33811 When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a… 7.5 Élevée 7 mai 2026
CVE-2026-39820 Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion… 7.5 Élevée 7 mai 2026

Autres produits Red Hat