IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen

openshift devspaces 3.27 Schwachstellen (CVE)

Für openshift devspaces 3.27 veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

30 Ergebnisse
9.0Kritisch
CVE-2026-33805

@fastify/reply-from vulnerable to connection header abuse enabling stripping of proxy-added headers

@fastify/reply-from @fastify/reply-from; @fastify/reply-from @fastify/http-proxy; Red Hat Red Hat OpenShift Dev Spaces 3.27; Red Hat Red Hat OpenShift AI (RHOAI)

@fastify/reply-from v12.6.1 and earlier and @fastify/http-proxy v11.4.3 and earlier process the client's Connection header after the proxy has added its own headers via rewriteRequestHeaders. This allows attackers to retroactively strip proxy-added headers fr…

7.4Hoch
CVE-2026-2332

HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

Eclipse Foundation Eclipse Jetty; Red Hat HawtIO HawtIO 4.4.0; Red Hat Red Hat AMQ Broker 7.13.5; Red Hat Red Hat build of Apache Camel 4.18.1 for Spring Boot 3.5.14

In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to the "funky chunks" techniques outlined here: * https://w4ke.info/2025/06/18/funky-chunks.html * https://w4ke.info/2025/10/29/funky-chunk…

1.3%EPSS
4.8Mittel
CVE-2026-40175

Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain

axios axios; Siemens gWAP; Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9; Red Hat Streams for Apache Kafka 3.2.0

Axios is a promise based HTTP client for the browser and Node.js. Versions prior to 1.15.0 and 0.3.1 are vulnerable to a specific gadget-style attack chain in which prototype pollution in a third-party dependency may be leveraged to inject unsanitized header …

2.0%EPSS
6.3Mittel
CVE-2025-62718

Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF

axios axios; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9; Red Hat Streams for Apache Kafka 3.2.0

Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.0 and 0.31.0, Axios does not correctly handle hostname normalization when checking NO_PROXY rules. Requests to loopback addresses like localhost. (with a trailing dot) or [::1] (I…

1.2%EPSS
7.5Hoch
CVE-2026-34986

Go JOSE affect by a panic in JWE decryption

go-jose go-jose; Red Hat Cryostat 4 on RHEL 9; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JS…

8.1Hoch
CVE-2026-4800

lodash vulnerable to Code Injection via `_.template` imports key names

lodash lodash; lodash lodash-es; lodash lodash-amd; lodash lodash.template

The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names, and both paths flow into the same Function() constructor sink. When an application passes untrusted input as …

2.8%EPSS
8.3Hoch
CVE-2026-33941

Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options

handlebars-lang handlebars.js; Red Hat Cluster Observability Operator 1.5.0; Red Hat Red Hat OpenShift Dev Spaces 3.27; Red Hat Cryostat 4

Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, the Handlebars CLI precompiler (`bin/handlebars` / `lib/precompiler.js`) concatenates user-controlled strings — template file names and several CLI…

8.1Hoch
CVE-2026-33940

Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial

handlebars-lang handlebars.js; Red Hat Cluster Observability Operator 1.5.0; Red Hat Red Hat OpenShift Dev Spaces 3.27; Red Hat Cryostat 4

Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, a crafted object placed in the template context can bypass all conditional guards in `resolvePartial()` and cause `invokePartial()` to return `unde…

7.5Hoch
CVE-2026-33939

Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation

handlebars-lang handlebars.js; Red Hat Cluster Observability Operator 1.5.0; Red Hat Red Hat OpenShift Dev Spaces 3.27; Red Hat Cryostat 4

Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, when a Handlebars template contains decorator syntax referencing an unregistered decorator (e.g. `{{*n}}`), the compiled template calls `lookupProp…

8.1Hoch
CVE-2026-33938

Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block

handlebars-lang handlebars.js; Red Hat Cluster Observability Operator 1.5.0; Red Hat Red Hat OpenShift Dev Spaces 3.27; Red Hat Cryostat 4

Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, the `@partial-block` special variable is stored in the template data context and is reachable and mutable from within a template via helpers that a…

9.8Kritisch
CVE-2026-33937

Handlebars.js has JavaScript Injection via AST Type Confusion

handlebars-lang handlebars.js; Red Hat Cluster Observability Operator 1.5.0; Red Hat Red Hat OpenShift Dev Spaces 3.27; Red Hat Cryostat 4

Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, `Handlebars.compile()` accepts a pre-parsed AST object in addition to a template string. The `value` field of a `NumberLiteral` AST node is emitted…

1.9%EPSS
8.7Hoch
CVE-2026-33871

Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass

netty netty; Red Hat Cryostat 4 on RHEL 9; Red Hat Red Hat AMQ Broker 7.12.7; Red Hat Red Hat AMQ Broker 7.13.5

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.132.Final and 4.2.10.Final, a remote user can trigger a Denial of Service (DoS) against a Netty HTTP/2 server by sending a flood of `CONTINUATION` frames. The serve…

1.1%EPSS
7.5Hoch
CVE-2026-33870

Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

netty netty; Red Hat Cryostat 4 on RHEL 9; Red Hat Red Hat AMQ Broker 7.12.7; Red Hat Red Hat AMQ Broker 7.13.5

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.132.Final and 4.2.10.Final, Netty incorrectly parses quoted strings in HTTP/1.1 chunked transfer encoding extension values, enabling request smuggling attacks. Vers…

7.5Hoch
CVE-2026-4926

path-to-regexp vulnerable to Denial of Service via sequential optional groups

path-to-regexp path-to-regexp; Red Hat Cryostat 4 on RHEL 9; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9

Impact: A bad regular expression is generated any time you have multiple sequential optional groups (curly brace syntax), such as `{a}{b}{c}:z`. The generated regex grows exponentially with the number of groups, causing denial of service. Patches: Fixed in…

7.8Hoch
CVE-2026-32305

Traefik mTLS bypass via fragmented ClientHello SNI extraction failure

traefik traefik; Red Hat Red Hat OpenShift Dev Spaces 3.27; Red Hat Red Hat OpenShift Dev Spaces 3.28; Red Hat Red Hat OpenShift GitOps

Traefik is an HTTP reverse proxy and load balancer. Versions 2.11.40 and below, 3.0.0-beta1 through 3.6.11, and 3.7.0-ea.1 are vulnerable to mTLS bypass through the TLS SNI pre-sniffing logic related to fragmented ClientHello packets. When a TLS ClientHello i…

7.5Hoch
CVE-2026-27137

Incorrect enforcement of email constraints in crypto/x509

Go standard library crypto/x509; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 9

When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be…

8.8Hoch
CVE-2026-27606

Rollup 4 has Arbitrary File Write via Path Traversal

rollup rollup; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9; Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9

Rollup is a module bundler for JavaScript. Versions prior to 2.80.0, 3.30.0, and 4.59.0 of the Rollup module bundler (specifically v4.x and present in current source) is vulnerable to an Arbitrary File Write via Path Traversal. Insecure file name sanitization…

1.7%EPSS
7.5Hoch
CVE-2026-25949

Traefik: TCP readTimeout bypass via STARTTLS on Postgres

traefik traefik; Red Hat Red Hat OpenShift Dev Spaces 3.27

Traefik is an HTTP reverse proxy and load balancer. Prior to 3.6.8, there is a potential vulnerability in Traefik managing STARTTLS requests. An unauthenticated client can bypass Traefik entrypoint respondingTimeouts.readTimeout by sending the 8-byte Postgres…

2.9Niedrig
CVE-2025-69873
ajv.js ajv; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9; Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9

ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled. The pattern keyword accepts runtime data via JSON Pointer syntax ($data reference), which is passed directly to t…

7.5Hoch
CVE-2026-25639

Axios affected by Denial of Service via __proto__ Key in mergeConfig

axios axios; Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9; Red Hat multicluster engine for Kubernetes 2.1; Red Hat multicluster engine for Kubernetes 2.6

Axios is a promise based HTTP client for the browser and Node.js. Prior to versions 0.30.3 and 1.13.5, the mergeConfig function in axios crashes with a TypeError when processing configuration objects containing __proto__ as an own property. An attacker can tr…

2.8%EPSS
7.5Hoch
CVE-2026-25223

Fastify's Content-Type header tab character allows body validation bypass

fastify fastify; Red Hat Red Hat OpenShift AI 2.16; Red Hat Red Hat OpenShift AI 2.25; Red Hat Red Hat OpenShift Dev Spaces 3.27

Fastify is a fast and low overhead web framework, for Node.js. Prior to version 5.7.2, a validation bypass vulnerability exists in Fastify where request body validation schemas specified by Content-Type can be completely circumvented. By appending a tab chara…