All products

Red Hat Developer Hub 2/rhdh/red-hat-developer-hub-backstage-plugin-adoption-insights-backend

Red Hat · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Forge: TLS client crash on an unsupported ServerHello compression methodCVE-2026-125332 · GHSA-W4XR-HQV8-CH44 node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat Medium Fix reported
Forge: Ed25519 signature verification accepts small-order public keysCVE-2026-125335 · GHSA-6889-VF6X-F3G5 node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat Low Fix reported
Forge: ReDoS in forge.http response header and cookie trimmingCVE-2026-125333 · GHSA-6CV4-P8M7-4R25 node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat Medium Fix reported
fast-xml-parser: Quadratic CPU consumption scanning unterminated stop-node tagsCVE-2026-126066 · GHSA-474X-HRWR-FGX4 fast-xml-parserCryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9 npmRed Hat Low Fix reported
Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake messageCVE-2026-119188 · GHSA-8HRF-8G6F-7XWP node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat High Fix reported
node-redis-parser: node-redis-parser: Denial of Service via unbounded recursion in RESP protocol parserCVE-2026-93435 Red Hat Connectivity Link 1/rhcl-1/rhcl-rhdh-dynamic-plugin-rhel9Red Hat Developer Hub 1/rhdh/backstage-community-plugin-tech-radar-backend Red Hat High No fix reported