Skip to content

Vulnerabilities of Red Hat DevWorkspace Operator 0.42

Is your version affected?

CVE Summary Score Published
CVE-2026-39821 The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label 9.6 Critical May 22, 2026
CVE-2026-42508 Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation 9.1 Critical May 22, 2026
CVE-2026-46595 Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of… 10.0 Critical May 22, 2026
CVE-2026-39829 The RSA and DSA public key parsers did not enforce size limits on key parameters 7.5 High May 22, 2026
CVE-2026-39830 A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the… 9.1 Critical May 22, 2026
CVE-2026-39828 When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were… 6.3 Medium May 22, 2026

Other Red Hat products