Security
فارسی
All products

Red Hat OpenShift Dev Spaces/devspaces/server-rhel8

Red Hat · Package
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
QOS.CH logback-core is vulnerable to Arbitrary Code Execution through file processingCVE-2025-11226 · GHSA-25QH-J22F-PWP8 ch.qos.logback:logback-coreLogging Subsystem for Red Hat OpenShift/logback-core MavenRed Hat Medium Fix reported
Apache Commons Lang is vulnerable to Uncontrolled Recursion when processing long inputsCVE-2025-48924 · GHSA-J288-Q9X7-2F5V commons-lang:commons-langorg.apache.commons:commons-lang3 MavenRed Hat Medium Fix reported
Apache Commons FileUpload, Apache Commons FileUpload: FileUpload DoS via part headersCVE-2025-48976 · GHSA-VV7R-C36W-3PRJ commons-fileupload:commons-fileuploadorg.apache.commons:commons-fileupload2-core MavenRed Hat High Fix reported
jackson-core can throw a StackoverflowError when processing deeply nested dataCVE-2025-52999 · GHSA-H46C-H94J-95F3 com.fasterxml.jackson.core:jackson-coreRed Hat AMQ Broker 7/jackson-core MavenRed Hat High Fix reported
Jackson-core Vulnerable to Memory Disclosure via Source Snippet in JsonLocationCVE-2025-49128 · GHSA-WF8F-6423-GFXG com.fasterxml.jackson.core:jackson-coreCryostat 4/jackson-core MavenRed Hat Medium Fix reported
Uncontrolled Resource Consumption in FasterXML jackson-databindCVE-2022-42004 · GHSA-RGV9-Q543-RQG4 com.fasterxml.jackson.core:jackson-databindRed Hat Enterprise Linux 8/jackson-databind MavenRed Hat High Fix reported
Apache Tomcat Session Fixation vulnerabilityCVE-2025-55668 · GHSA-23HV-MWM6-G8JF org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina MavenRed Hat Medium Fix reported
Apache Tomcat Vulnerable to Improper Resource Shutdown or ReleaseCVE-2025-61795 · GHSA-HGRR-935X-PQ79 org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina MavenRed Hat Low Fix reported
Apache Tomcat Vulnerable to Relative Path TraversalCVE-2025-55752 · GHSA-WMWF-9CCG-FFF5 org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina MavenRed Hat High Fix reported
Apache Tomcat - Security constraint bypass for pre/post-resourcesCVE-2025-49125 · GHSA-WC4R-XQ3C-5CF3 org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina MavenRed Hat Medium Fix reported
Apache Tomcat - DoS in multipart uploadCVE-2025-48988 · GHSA-H3GC-QFQQ-6H8F org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina MavenRed Hat High Fix reported
Apache Log4j 1.x (EOL) allows Denial of Service (DoS)CVE-2023-26464 · GHSA-VP98-W2P3-MV35 log4j:log4jorg.apache.logging.log4j:log4j-core MavenRed Hat High Fix reported