redhat developer hub güvenlik açıkları (CVE)

redhat developer hub için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

4 sonuç

7.0Yüksek

CVE-2026-44495 5 ay önce

Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge

axios axios; Red Hat Red Hat AMQ Broker 7.13.6; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9

Axios is a promise based HTTP client for the browser and Node.js. From 0.19.0 to before 0.31.1 and 1.15.2, Axios contains prototype-pollution gadgets in request config processing. If another vulnerability in the same JavaScript process has already polluted Ob…

8.7Yüksek

CVE-2026-29063 8 ay önce

Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable

immutable-js immutable-js; Red Hat Cluster Observability Operator 1.5.0; Red Hat Migration Toolkit for Virtualization 2.1; Red Hat Migration Toolkit for Virtualization 2.9

Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() APIs. This issue has been pa…

6.5Orta

CVE-2026-3118 8 ay önce

Rhdh: graphql injection leading to platform-wide denial of service (dos) in rh developer hub orchestrator plugin

Red Hat Red Hat Developer Hub 1.8; Red Hat Red Hat Developer Hub 1.9

A security flaw was identified in the Orchestrator Plugin of Red Hat Developer Hub (Backstage). The issue occurs due to insufficient input validation in GraphQL query handling. An authenticated user can inject specially crafted input into API requests, which …

7.5Yüksek

CVE-2025-14874 11 ay önce

Nodemailer: nodemailer: denial of service via crafted email address header

nodemailer nodemailer; Red Hat Red Hat Advanced Cluster Management for Kubernetes 2; Red Hat Red Hat Ceph Storage 8; Red Hat Red Hat Developer Hub 1

A flaw was found in Nodemailer. This vulnerability allows a denial of service (DoS) via a crafted email address header that triggers infinite recursion in the address parser.