Vulnerabilidades de openshift devspaces 3.26 (CVE)

Registros CVE publicados para openshift devspaces 3.26, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

5 resultados

8.6Alta

CVE-2026-1761 hace 9 meses

Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Red Hat Enterprise Linux 8

A flaw was found in libsoup. This stack-based buffer overflow vulnerability occurs during the parsing of multipart HTTP responses due to an incorrect length calculation. A remote attacker can exploit this by sending a specially crafted multipart HTTP response…

1.1%EPSS

8.8Alta

CVE-2025-15467 hace 9 meses

Stack buffer overflow in CMS (Auth)EnvelopedData parsing

OpenSSL OpenSSL; Siemens AI Lightweight Inference Server; Siemens Connector for Azure; Siemens Databus

Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote …

75%EPSS

8.0Alta

CVE-2026-22029 hace 10 meses

React Router vulnerable to XSS via Open Redirects

remix-run react-router; remix-run @remix-run/router; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9

React Router is a router for React. In @remix-run/router version prior to 1.23.2 and react-router 7.0.0 through 7.11.0, React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unsta…

8.6Alta

CVE-2026-0719 hace 10 meses

Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Red Hat Enterprise Linux 8

A flaw was identified in the NTLM authentication handling of the libsoup HTTP library, used by GNOME and other applications for network communication. When processing extremely long passwords, an internal size calculation can overflow due to improper use of s…

8.9Alta

CVE-2026-21441 hace 10 meses

urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)

urllib3 urllib3; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support

urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decodi…

2.9%EPSS