Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat OpenShift Dev Spaces/devspaces/code-sshd-rhel9
Red Hat
· Package
14 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
@tootallnate/once vulnerable to Incorrect Control Flow Scoping
CVE-2026-3449 · GHSA-VPQ2-C234-7XJ6
@tootallnate/once
Confidential Compute Attestation/openshift-sandboxed-containers/osc-pccs
npm
Red Hat
Low
Fix reported
2026-09-10
js-yaml has prototype pollution in merge (<<)
CVE-2025-64718 · GHSA-MH29-5H37-FV8M
js-yaml
Cryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9
npm
Red Hat
Medium
Fix reported
2026-09-10
Undici has Unbounded Memory Consumption in its DeduplicationHandler via Response Buffering that leads to DoS
CVE-2026-2581 · GHSA-PHC3-FGPG-7M6H
undici
Cryostat 4/io.cryostat-cryostat
npm
Red Hat
Medium
Fix reported
2026-09-10
Undici has CRLF Injection in undici via `upgrade` option
CVE-2026-1527 · GHSA-4992-7RV2-5PVQ
undici
Cryostat 4/io.cryostat-cryostat
npm
Red Hat
Medium
Fix reported
2026-09-10
file-type affected by infinite loop in ASF parser on malformed input with zero-size sub-header
CVE-2026-31808 · GHSA-5V7R-6R5C-R473
file-type
Cryostat 4/io.cryostat-cryostat
npm
Red Hat
Medium
Fix reported
2026-09-10
Undici has an HTTP Request/Response Smuggling issue
CVE-2026-1525 · GHSA-2MJP-6Q6P-2QXM
undici
OpenShift Lightspeed/openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9
npm
Red Hat
Medium
Fix reported
2026-09-10
time vulnerable to stack exhaustion Denial of Service attack
CVE-2026-25727 · GHSA-R6V5-FH4H-64XC
Version ranges need review.
time
Confidential Compute Attestation/build-of-trustee/trustee-rhel9
Rust / Cargo
Red Hat
Medium
Fix reported
2026-09-10
minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments
CVE-2026-27903 · GHSA-7R86-CG39-JMMJ
minimatch
Cryostat 4/io.cryostat-cryostat
npm
Red Hat
High
Fix reported
2026-09-10
webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior
CVE-2025-68458 · GHSA-8FGC-7CC6-RX7X
webpack
Cryostat 4/io.cryostat-cryostat
npm
Red Hat
Low
Fix reported
2026-09-10
webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects → SSRF + cache persistence
CVE-2025-68157 · GHSA-38R7-794H-5758
webpack
Cryostat 4/io.cryostat-cryostat
npm
Red Hat
Low
Fix reported
2026-09-10
Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion
CVE-2026-22036 · GHSA-G9MF-H72J-4RW9
undici
Cryostat 4/io.cryostat-cryostat
npm
Red Hat
Medium
Fix reported
2026-09-10
Elliptic Uses a Cryptographic Primitive with a Risky Implementation
CVE-2025-14505 · GHSA-848J-6MX2-7J84
elliptic
Logging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-operator-bundle
npm
Red Hat
Low
No fix reported
2026-09-10
gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility
CVE-2026-41991
Red Hat Enterprise Linux 6/gzip
Red Hat Enterprise Linux 7/gzip
Red Hat
Medium
No fix reported
Not recorded
gzip: gzip: Information disclosure via global buffer overflow in LZH decompression
CVE-2026-41992
Red Hat Enterprise Linux 6/gzip
Red Hat Enterprise Linux 7/gzip
Red Hat
Low
No fix reported
Not recorded
