Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Developer Hub 2/rhdh/rhdh-hub-rhel10
Red Hat
· Package
8 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Forge: TLS client crash on an unsupported ServerHello compression method
CVE-2026-125332 · GHSA-W4XR-HQV8-CH44
node-forge
Node HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9
npm
Red Hat
Medium
Fix reported
2026-11-11
Forge: Ed25519 signature verification accepts small-order public keys
CVE-2026-125335 · GHSA-6889-VF6X-F3G5
node-forge
Node HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9
npm
Red Hat
Low
Fix reported
2026-11-11
Forge: ReDoS in forge.http response header and cookie trimming
CVE-2026-125333 · GHSA-6CV4-P8M7-4R25
node-forge
Node HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9
npm
Red Hat
Medium
Fix reported
2026-11-11
fast-xml-parser: Quadratic CPU consumption scanning unterminated stop-node tags
CVE-2026-126066 · GHSA-474X-HRWR-FGX4
fast-xml-parser
Cryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9
npm
Red Hat
Low
Fix reported
2026-11-11
Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message
CVE-2026-119188 · GHSA-8HRF-8G6F-7XWP
node-forge
Node HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9
npm
Red Hat
High
Fix reported
2026-10-31
webpack-dev-middleware vulnerable to Path Traversal via non-slash-terminated publicPath
CVE-2026-76844 · GHSA-G84C-RXFJ-3J2C
webpack-dev-middleware
Cryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9
npm
Red Hat
High
Fix reported
2026-10-03
node-redis-parser: node-redis-parser: Denial of Service via unbounded recursion in RESP protocol parser
CVE-2026-93435
Red Hat Connectivity Link 1/rhcl-1/rhcl-rhdh-dynamic-plugin-rhel9
Red Hat Developer Hub 1/rhdh/backstage-community-plugin-tech-radar-backend
Red Hat
High
No fix reported
Not recorded
i18next: i18next: Denial of Service via unsafe recursive object merging
CVE-2026-63402
Cryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9
Migration Toolkit for Applications 8/mta/mta-ui-rhel9
Red Hat
Medium
No fix reported
Not recorded
