openshift devspaces 3.30 Schwachstellen (CVE)

8.1Hoch

CVE-2026-54513 vor 4 Monaten

jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)

FasterXML jackson-databind; Red Hat Cryostat 4 on RHEL 9; Red Hat Red Hat AMQ Broker 7.13.6; Red Hat Red Hat AMQ Broker 7.14.1

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4, BasicPolymorphicTypeValidator.Builder.allowIfSubTypeIsArray() allowlists any array type based only…

1.2%EPSS

7.8Hoch

CVE-2026-53622 vor 4 Monaten

Traefik: HTTP/3 mTLS bypass via exact SNI TLSOptions lookup for wildcard and mixed-case hosts

traefik traefik; Red Hat Red Hat OpenShift Dev Spaces 3.30

Traefik is an HTTP reverse proxy and load balancer. Versions prior to 3.7.3, 3.6.18, and 2.11.51 have a critical vulnerability in Traefik's HTTP/3 (QUIC) TLS configuration selection that allows unauthenticated clients to bypass router-specific mTLS enforcemen…

7.8Hoch

CVE-2026-48491 vor 4 Monaten

Traefik: SNICheck ignores wildcard TLSOptions mappings, allowing domain-fronted mTLS bypass

traefik traefik; Red Hat Red Hat OpenShift Dev Spaces 3.30

Traefik is an HTTP reverse proxy and load balancer. From 3.7.0 until 3.7.3, there is a high severity vulnerability in Traefik's domain-fronting protection (SNICheck) that allows an unauthenticated client to bypass mutual TLS enforced through wildcard router T…

7.8Hoch

CVE-2026-48020 vor 4 Monaten

Traefik StripPrefix Route-Level Auth Bypass via Path Normalization

traefik traefik; Red Hat Red Hat OpenShift Dev Spaces 3.30

Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.48, 3.6.19, and 3.7.3, there is a high severity vulnerability in Traefik's StripPrefix middleware that allows an unauthenticated attacker to bypass route-level authentication and authorization.…

7.5Hoch

CVE-2026-12151 vor 4 Monaten

undici WebSocket client vulnerable to denial of service via fragment count bypass

undici undici; Red Hat Cryostat 4 on RHEL 9; Red Hat Red Hat AMQ Broker 7.13.6; Red Hat Red Hat AMQ Broker 7.14.1

Impact: The undici WebSocket client enforces maxPayloadSize on the cumulative byte count of fragments in a message but does not enforce a limit on the number of fragments. A malicious WebSocket server can stream many small or empty continuation frames that ea…

7.5Hoch

CVE-2026-12143 vor 4 Monaten

form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)

form-data form-data; Red Hat Cryostat 4 on RHEL 9; Red Hat Red Hat AMQ Broker 7.13.6; Red Hat Red Hat AMQ Broker 7.14.1

form-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the `field` argument to `FormData#append` and the `filename` option are concatenated verbatim into the `Content-Disposition` header without escaping carriage …

7.5Hoch

CVE-2026-50010 vor 4 Monaten

Netty's wrapping plain trust manager silently disables hostname verification

netty netty; Red Hat Cryostat 4 on RHEL 9; Red Hat Red Hat AMQ Broker 7.13.6; Red Hat Red Hat AMQ Broker 7.14.1

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, SimpleTrustManagerFactory.engineGetTrustManagers() and related paths wrap any user-supplied plain X509TrustManager in X…

8.7Hoch

CVE-2026-47691 vor 4 Monaten

Netty has Insufficient Bailiwick Validation for NS Records

netty netty; Red Hat Cryostat 4 on RHEL 9; Red Hat Red Hat Build of Apache Camel 3.33 for Quarkus 3.33.2.SP1; Red Hat Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's `DnsResolveContext` insufficiently validates the bailiwick of NS records, enabling DNS Cache Poisoning. An atta…

8.7Hoch

CVE-2026-45674 vor 4 Monaten

Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records

netty netty; Red Hat Cryostat 4 on RHEL 9; Red Hat Red Hat Build of Apache Camel 3.33 for Quarkus 3.33.2.SP1; Red Hat Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS responses. Versions 4.1.135.…

7.5Hoch

CVE-2026-45416 vor 4 Monaten

Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes

netty netty; Red Hat Cryostat 4 on RHEL 9; Red Hat Red Hat AMQ Broker 7.13.6; Red Hat Red Hat AMQ Broker 7.14.1

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, SslClientHelloHandler.decode() reads the 24-bit TLS handshake length and, when the ClientHello does not fit in the firs…

7.5Hoch

CVE-2026-40984 vor 5 Monaten

Micrometer HTTP server instrumentations DoS vulnerability

Spring Micrometer; Red Hat Red Hat AMQ Broker 7.13.6; Red Hat Red Hat AMQ Broker 7.14.1; Red Hat Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16

In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition. Affected versions: micrometer-core 1.16.0 through 1.16.5; 1.15.0 through 1.15.11; 1.14.0 through 1.14.15; 1.13.0 through 1…

7.5Hoch

CVE-2026-40983 vor 5 Monaten

Micrometer gRPC server instrumentation DoS vulnerability

Spring Micrometer; Red Hat Red Hat AMQ Broker 7.14.1; Red Hat Red Hat Build of Apache Camel 4.18 for Quarkus 3.33; Red Hat Red Hat build of Keycloak 26.6

In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service (DoS) condition. Affected versions: Micrometer 1.16.0 through 1.16.5; 1.15.0 through 1.15.11.

8.1Hoch

CVE-2026-9277 vor 5 Monaten

shell-quote `quote()` does not validate object-token shapes, allowing command injection via line terminators in `.op`

shell-quote; Red Hat Cryostat 4 on RHEL 9; Red Hat Cluster Observability Operator 1.5.0; Red Hat Red Hat Ansible Automation Platform 2.1

shell-quote's `quote()` function did not validate object-token inputs against the operator model used by `parse()`. The `.op` field was backslash-escaped character by character using `/(.)/g`, which in JavaScript does not match line terminators (\n, \r, U+202…

5.3Mittel

CVE-2026-39835 vor 5 Monaten

Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

golang.org/x/crypto golang.org/x/crypto/ssh; Red Hat Cryostat 4 on RHEL 9; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 8

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

7.4Hoch

CVE-2026-42264 vor 6 Monaten

Axios: Prototype pollution read-side gadgets in HTTP adapter allow credential injection and request hijacking

axios axios; Red Hat Red Hat AMQ Broker 7.13.6; Red Hat Red Hat AMQ Broker 7.14.1; Red Hat Red Hat Data Grid 8.6.2

Axios is a promise based HTTP client for the browser and Node.js. From version 1.0.0 to before version 1.15.2, fFive config properties (auth, baseURL, socketPath, beforeRedirect, and insecureHTTPParser) in the HTTP adapter are read via direct property access …

7.5Hoch

CVE-2026-39820 vor 6 Monaten

Quadratic string concatentation in consumeComment in net/mail

Go standard library net/mail; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9; Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9

Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.

7.5Hoch

CVE-2026-42499 vor 6 Monaten

Quadratic string concatenation in consumePhrase in net/mail

Go standard library net/mail; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9; Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9

Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.

9.4Kritisch

CVE-2026-41242 vor 6 Monaten

protobufjs has an arbitrary code execution issue

protobufjs protobuf.js; Red Hat Red Hat Developer Hub 1.8; Red Hat Red Hat Developer Hub 1.9; Red Hat Red Hat OpenShift AI 2.25

protobufjs compiles protobuf definitions into JavaScript (JS) functions. In versions prior to 8.0.1, 7.5.5, and 6.11.6, attackers can inject arbitrary code in the "type" fields of protobuf definitions, which will then execute during object decoding using that…

7.5Hoch

CVE-2026-34986 vor 7 Monaten

Go JOSE affect by a panic in JWE decryption

go-jose go-jose; Red Hat Cryostat 4 on RHEL 9; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JS…