Vulnerability-Lookup

RHSA-2026:90321

Vulnerability from csaf_redhat - Published: 2026-10-26 14:24 - Updated: 2026-10-30 15:52

Summary

Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.31.0 Release.

Severity

Critical

Notes

Topic: Red Hat OpenShift Dev Spaces 3.31.0 has been released.

Details: Red Hat OpenShift Dev Spaces provides a cloud developer workspace server and a browser-based IDE built for teams and organizations. Dev Spaces runs in OpenShift and is well-suited for container-based development. The 3.31 release is based on Eclipse Che 7.123.x and uses the DevWorkspace engine to provide support for workspaces based on devfile v2.1 and v2.2. Users still using the v1 standard should migrate as soon as possible. https://devfile.io/docs/2.2.0/migrating-to-devfile-v2 Dev Spaces supports OpenShift EUS releases v4.16 and higher. Users are expected to update to supported OpenShift releases in order to continue to get Dev Spaces updates. https://access.redhat.com/support/policy/updates/openshift#crw

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2023-54404

A flaw was found in zod. A remote attacker can trigger a denial of service (DoS) by submitting an excessively large array of invalid items to an application that validates input schemas without length constraints. Because the validation process accumulates error records for each failing element without a cap or early exit, the application consumes excessive memory and crashes due to an out-of-memory condition.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:3049a7248a4ad4d649b287aae877475deafeb7b6e1d0ecbec540f816e997b568_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:43a1bdbd4f337c81bc1a789c07d716e74a4a08f8e60374769ccd1bc202cef895_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:7e13f4dc4021d19696666d180d9d05ed4bad0ed1ae88e78562b5bbfad7adc314_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:f2c0813c6867724a82635c823a56077a8dd3b9322bcd6fcb0f4bf6dc05107a23_s390x	—	Vendor Fix fix Workaround

Known not affected 57 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:11c73dd00773e8df773a920d6b983649444630725b403720cc22f61dcbd9a88a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:12ee43f548b9bbc51657e77500f399dfef7ef633b5e162007d627246a773981f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:776d8fae8372638c1824a823eb5e5f9f76a1130493e979ffdeb0d5d1102b7542_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:956eeb6721b90d9024927c2afe185f9263329bd919a0ed9aa07d55d1b1deaab8_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:2e8188fdf97e15872ed626bd136071a20200791a879245ca911dcd1063b19732_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:5b0b6b676014f1c8d8ad5d6bc99aedadaf20b5846dc68c007026592541e9d29d_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:763324f7c02cc40a8217fc8daf103b5180d1be865fe8c366f877caae08ec0198_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:b72b4f747473061d4cea48ba76b318323e2d24714f020a6e7053ed641d864d76_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:01a0a766d5f13271a60cd6e2747760e4e9a741ef112fe5e9558fdc74ef2c5cff_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:169c11b438d9308b47b3ff9db32482b56581c725459393a04c3aeb2493743a8e_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:e054ba4dfbd318419796b9e604850ba3387b3485fa2e3d75e49d766e15574b42_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:fada2e23889911805c7122c6dc4571ecc4976b1a9250f2b300a532794e5499f9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3ce6e51c799e2453155058b1e21da125f9a1d1b7107d1cc6fc27bfe4bc4c6ce7_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1cb02a116a4e4ced10ce72ce7e33a8561bebbc3a193d9cfc9105ef02ae460486_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:3b26b0470955d4675172239466f4fb5c92a44b85eb830270bd8b7f6a1bb5b784_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:7ce60bc263471d3726dbbb6edfac0c2a4b58d23adb414f63f604440ba783fce5_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:fc9d7862ed6b0ce5ffe92cdaaee509b2ae161992b8f9bdfdb6865ccb04327d35_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:4a7c40e705dd0b17f4f91f29479b0818ed138e0442a65daa3292f5663dbfc52c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:694b88929ec77e63de90cd3dcb9f3e0899182f430c973d2b1367a2bec83e8b2f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acbe8a4b057e7e659e3d421634e9115b49a9a244e6c46a96e0f131a11cae167c_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acc41ca9440443de6018641e9d8c37a31fe32ab4e6747edd022cb8ed63d5bb0f_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0c38a05e03b0b4bcd6156c3c43667436cb2b31b41ea6c1a806ce062c4b051b1f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:1723204012943c8844d04645d564955d20cd22c720f06f33e7f86181454fea55_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:2dcc79c07726598b1c8a6b398d2da30503a3dae96e640963eb2b18a85a7dd7b2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8b784c0c62cbbc470c624f08b145a02a5054216398cf7d3554400a9ff926b7ed_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3e128932a688e7db59a8057bf9c2e84f01004143aaef5f8f8ee4cdfd33d90cfb_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3fa328a585adc80b2870d2841d3db177745c6b29605c69fb077f15cb49c63ba8_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:82ca34ecce0f6b9de413147167c5a2faec1f98b409c21a6fe7d00a56a1fef1f1_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f0d13754868e1f1d08523c2459e1f0a8b7c937e27da82b19b0f1ae73f989384d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:11f121479a915c5f59899f6e73afeeb299e3d6d0a1f091e7e87c51a373191093_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:25a5c98d72c1bdae4d2ecfef13433afe12897b2ec86f0609908fbf850700b884_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:2fc3444d7604901159a2f864dec6d59e3c2000bb7306c778591956c0a76b7ec5_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:bf49207dde3565ce593c0d276434c43e9fb9adcc950c3ccab53837e31ae27313_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:0a5e6487fec86246ba15b38a6a3651c5cd9316d25044a3c2bdf5572d1ce5a00b_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:5cbe66e31707a799600e2927d127666f1a1a9ac69e31da0efa4aed0191bacb06_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bd9a950cc2a62fab1ce027a744868213c0dac138d46c37daa099a87121b17163_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c73227f14687284ed632c12fdee7db809573bf029785a7a5622f60b38a52fd88_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:46fb8a7bcf2378cb7ed3f6d1d9a8fd126d0a6b5eea6aad190d533d292b6fa5a2_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:47078d49a8f53c974e220017c77c1421421d73611ecd92303105812659106737_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:536a091643cba26882ea90dfb58582a2ecf6424b4bf763da3a678ae2c586bd0f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9f9f8ac5d0856e701c31912eaadba138b681a20f22d733254b82245ff7a8930c_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a447e87fb55509fce9bfcf02b5571e87d9a002e331a20614bae17076ad544d3_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a7e5a72d2f82d60918e396a8cf3a973c479752de5e07bb8bd5bdbb9b1e1019c_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:51d2ba5a66f96afc8a61c6df1a147c67ca37a1aeeb9e0a40a9b3f8af56ea01e9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:7710bcfbeb5d4fe1dc98b9bb5cb3b99403fbcc2a680a159ba363530f48b8851d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:4f673d88ce055610c45123bef5c31446fdb8406d1d4969a643943f246e179c84_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:a3213419c43bfccc2fc55d9dd0115e464bd2fd8fb4e5a400cc3880f65198e9e3_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:c51e88125ea5402efd4d6d445089fe17d3e7c719d6cab72538eea0791dd2663a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:ed77f86958364fe53d8181e451581a77e242a4db791976fc7490cfcb454e589e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:8a6027f91f12a2ad6d50b64bf21fbf97a706be0fa3c05cce44df4bc1c6795462_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d313a31a1a0adde95eac4e0860b4a928a6c9c7bf00853214aa4b9c4a9be0365_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d0433de2bbd7bb21fdee82f3a0ac2f41c87675c8d525160f6697be4f52652cb6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:fcbe0ac15a63ac8b452b77c1900028e97b0237f946b3ecc9faf044168c5d7969_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:2df809162682b8c568979cce1bb298f116f4dc3673bb5f8af1fcbdca8e90ce79_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:64ffe5b3c536feb240530d14a507e9a99ec04b79f4035ade2714d5bca32cf77b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:65c3ca83edd90f463d03a1df2d375f95c1e4f39e2329d565b9ae8a462153e51e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:77c4c66043157fe503b63c347b0e67099b8e4948b8bb35dc46283aef6460c60e_ppc64le	—	Workaround

Threats

Impact Important

CVE-2025-62718

A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.

7.0 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L

CWE-1289 - Improper Validation of Unsafe Equivalence in Input

Affected products

Fixed 4 products, the same list as for CVE-2023-54404

Known not affected 57 products, the same list as for CVE-2023-54404

Threats

Impact Important

CVE-2026-8643

A flaw was found in pip, the package installer for Python. A remote attacker can exploit this vulnerability by tricking a victim into installing a malicious Python wheel. This wheel contains specially crafted entry-point names that use directory traversal or absolute paths. This allows pip to write generated script wrappers outside the intended installation directory, leading to arbitrary file overwrite. This can severely impact system integrity and availability, and in certain scenarios, may lead to arbitrary code execution.

8.0 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:2df809162682b8c568979cce1bb298f116f4dc3673bb5f8af1fcbdca8e90ce79_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:64ffe5b3c536feb240530d14a507e9a99ec04b79f4035ade2714d5bca32cf77b_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:65c3ca83edd90f463d03a1df2d375f95c1e4f39e2329d565b9ae8a462153e51e_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:77c4c66043157fe503b63c347b0e67099b8e4948b8bb35dc46283aef6460c60e_ppc64le	—	Vendor Fix fix Workaround

Known not affected 57 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:3049a7248a4ad4d649b287aae877475deafeb7b6e1d0ecbec540f816e997b568_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:43a1bdbd4f337c81bc1a789c07d716e74a4a08f8e60374769ccd1bc202cef895_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:7e13f4dc4021d19696666d180d9d05ed4bad0ed1ae88e78562b5bbfad7adc314_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:f2c0813c6867724a82635c823a56077a8dd3b9322bcd6fcb0f4bf6dc05107a23_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:11c73dd00773e8df773a920d6b983649444630725b403720cc22f61dcbd9a88a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:12ee43f548b9bbc51657e77500f399dfef7ef633b5e162007d627246a773981f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:776d8fae8372638c1824a823eb5e5f9f76a1130493e979ffdeb0d5d1102b7542_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:956eeb6721b90d9024927c2afe185f9263329bd919a0ed9aa07d55d1b1deaab8_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:2e8188fdf97e15872ed626bd136071a20200791a879245ca911dcd1063b19732_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:5b0b6b676014f1c8d8ad5d6bc99aedadaf20b5846dc68c007026592541e9d29d_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:763324f7c02cc40a8217fc8daf103b5180d1be865fe8c366f877caae08ec0198_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:b72b4f747473061d4cea48ba76b318323e2d24714f020a6e7053ed641d864d76_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:01a0a766d5f13271a60cd6e2747760e4e9a741ef112fe5e9558fdc74ef2c5cff_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:169c11b438d9308b47b3ff9db32482b56581c725459393a04c3aeb2493743a8e_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:e054ba4dfbd318419796b9e604850ba3387b3485fa2e3d75e49d766e15574b42_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:fada2e23889911805c7122c6dc4571ecc4976b1a9250f2b300a532794e5499f9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3ce6e51c799e2453155058b1e21da125f9a1d1b7107d1cc6fc27bfe4bc4c6ce7_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1cb02a116a4e4ced10ce72ce7e33a8561bebbc3a193d9cfc9105ef02ae460486_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:3b26b0470955d4675172239466f4fb5c92a44b85eb830270bd8b7f6a1bb5b784_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:7ce60bc263471d3726dbbb6edfac0c2a4b58d23adb414f63f604440ba783fce5_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:fc9d7862ed6b0ce5ffe92cdaaee509b2ae161992b8f9bdfdb6865ccb04327d35_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:4a7c40e705dd0b17f4f91f29479b0818ed138e0442a65daa3292f5663dbfc52c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:694b88929ec77e63de90cd3dcb9f3e0899182f430c973d2b1367a2bec83e8b2f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acbe8a4b057e7e659e3d421634e9115b49a9a244e6c46a96e0f131a11cae167c_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acc41ca9440443de6018641e9d8c37a31fe32ab4e6747edd022cb8ed63d5bb0f_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0c38a05e03b0b4bcd6156c3c43667436cb2b31b41ea6c1a806ce062c4b051b1f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:1723204012943c8844d04645d564955d20cd22c720f06f33e7f86181454fea55_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:2dcc79c07726598b1c8a6b398d2da30503a3dae96e640963eb2b18a85a7dd7b2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8b784c0c62cbbc470c624f08b145a02a5054216398cf7d3554400a9ff926b7ed_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3e128932a688e7db59a8057bf9c2e84f01004143aaef5f8f8ee4cdfd33d90cfb_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3fa328a585adc80b2870d2841d3db177745c6b29605c69fb077f15cb49c63ba8_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:82ca34ecce0f6b9de413147167c5a2faec1f98b409c21a6fe7d00a56a1fef1f1_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f0d13754868e1f1d08523c2459e1f0a8b7c937e27da82b19b0f1ae73f989384d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:11f121479a915c5f59899f6e73afeeb299e3d6d0a1f091e7e87c51a373191093_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:25a5c98d72c1bdae4d2ecfef13433afe12897b2ec86f0609908fbf850700b884_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:2fc3444d7604901159a2f864dec6d59e3c2000bb7306c778591956c0a76b7ec5_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:bf49207dde3565ce593c0d276434c43e9fb9adcc950c3ccab53837e31ae27313_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:0a5e6487fec86246ba15b38a6a3651c5cd9316d25044a3c2bdf5572d1ce5a00b_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:5cbe66e31707a799600e2927d127666f1a1a9ac69e31da0efa4aed0191bacb06_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bd9a950cc2a62fab1ce027a744868213c0dac138d46c37daa099a87121b17163_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c73227f14687284ed632c12fdee7db809573bf029785a7a5622f60b38a52fd88_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:46fb8a7bcf2378cb7ed3f6d1d9a8fd126d0a6b5eea6aad190d533d292b6fa5a2_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:47078d49a8f53c974e220017c77c1421421d73611ecd92303105812659106737_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:536a091643cba26882ea90dfb58582a2ecf6424b4bf763da3a678ae2c586bd0f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9f9f8ac5d0856e701c31912eaadba138b681a20f22d733254b82245ff7a8930c_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a447e87fb55509fce9bfcf02b5571e87d9a002e331a20614bae17076ad544d3_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a7e5a72d2f82d60918e396a8cf3a973c479752de5e07bb8bd5bdbb9b1e1019c_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:51d2ba5a66f96afc8a61c6df1a147c67ca37a1aeeb9e0a40a9b3f8af56ea01e9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:7710bcfbeb5d4fe1dc98b9bb5cb3b99403fbcc2a680a159ba363530f48b8851d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:4f673d88ce055610c45123bef5c31446fdb8406d1d4969a643943f246e179c84_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:a3213419c43bfccc2fc55d9dd0115e464bd2fd8fb4e5a400cc3880f65198e9e3_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:c51e88125ea5402efd4d6d445089fe17d3e7c719d6cab72538eea0791dd2663a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:ed77f86958364fe53d8181e451581a77e242a4db791976fc7490cfcb454e589e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:8a6027f91f12a2ad6d50b64bf21fbf97a706be0fa3c05cce44df4bc1c6795462_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d313a31a1a0adde95eac4e0860b4a928a6c9c7bf00853214aa4b9c4a9be0365_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d0433de2bbd7bb21fdee82f3a0ac2f41c87675c8d525160f6697be4f52652cb6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:fcbe0ac15a63ac8b452b77c1900028e97b0237f946b3ecc9faf044168c5d7969_s390x	—	Workaround

Threats

Impact Important

CVE-2026-9496

A flaw was found in the pacote component. A remote attacker can exploit this denial of service (DoS) vulnerability by providing a specially crafted input to the `addGitSha` function. This malicious input triggers excessive CPU consumption due to regex replacement and string manipulation, which can lead to the process stalling or crashing.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1333 - Inefficient Regular Expression Complexity

Affected products

Fixed 16 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:01a0a766d5f13271a60cd6e2747760e4e9a741ef112fe5e9558fdc74ef2c5cff_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:169c11b438d9308b47b3ff9db32482b56581c725459393a04c3aeb2493743a8e_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:e054ba4dfbd318419796b9e604850ba3387b3485fa2e3d75e49d766e15574b42_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:fada2e23889911805c7122c6dc4571ecc4976b1a9250f2b300a532794e5499f9_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:0a5e6487fec86246ba15b38a6a3651c5cd9316d25044a3c2bdf5572d1ce5a00b_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:5cbe66e31707a799600e2927d127666f1a1a9ac69e31da0efa4aed0191bacb06_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bd9a950cc2a62fab1ce027a744868213c0dac138d46c37daa099a87121b17163_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c73227f14687284ed632c12fdee7db809573bf029785a7a5622f60b38a52fd88_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:46fb8a7bcf2378cb7ed3f6d1d9a8fd126d0a6b5eea6aad190d533d292b6fa5a2_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:47078d49a8f53c974e220017c77c1421421d73611ecd92303105812659106737_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:536a091643cba26882ea90dfb58582a2ecf6424b4bf763da3a678ae2c586bd0f_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9f9f8ac5d0856e701c31912eaadba138b681a20f22d733254b82245ff7a8930c_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:2df809162682b8c568979cce1bb298f116f4dc3673bb5f8af1fcbdca8e90ce79_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:64ffe5b3c536feb240530d14a507e9a99ec04b79f4035ade2714d5bca32cf77b_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:65c3ca83edd90f463d03a1df2d375f95c1e4f39e2329d565b9ae8a462153e51e_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:77c4c66043157fe503b63c347b0e67099b8e4948b8bb35dc46283aef6460c60e_ppc64le	—	Vendor Fix fix Workaround

Known not affected 45 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:3049a7248a4ad4d649b287aae877475deafeb7b6e1d0ecbec540f816e997b568_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:43a1bdbd4f337c81bc1a789c07d716e74a4a08f8e60374769ccd1bc202cef895_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:7e13f4dc4021d19696666d180d9d05ed4bad0ed1ae88e78562b5bbfad7adc314_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:f2c0813c6867724a82635c823a56077a8dd3b9322bcd6fcb0f4bf6dc05107a23_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:11c73dd00773e8df773a920d6b983649444630725b403720cc22f61dcbd9a88a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:12ee43f548b9bbc51657e77500f399dfef7ef633b5e162007d627246a773981f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:776d8fae8372638c1824a823eb5e5f9f76a1130493e979ffdeb0d5d1102b7542_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:956eeb6721b90d9024927c2afe185f9263329bd919a0ed9aa07d55d1b1deaab8_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:2e8188fdf97e15872ed626bd136071a20200791a879245ca911dcd1063b19732_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:5b0b6b676014f1c8d8ad5d6bc99aedadaf20b5846dc68c007026592541e9d29d_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:763324f7c02cc40a8217fc8daf103b5180d1be865fe8c366f877caae08ec0198_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:b72b4f747473061d4cea48ba76b318323e2d24714f020a6e7053ed641d864d76_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3ce6e51c799e2453155058b1e21da125f9a1d1b7107d1cc6fc27bfe4bc4c6ce7_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1cb02a116a4e4ced10ce72ce7e33a8561bebbc3a193d9cfc9105ef02ae460486_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:3b26b0470955d4675172239466f4fb5c92a44b85eb830270bd8b7f6a1bb5b784_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:7ce60bc263471d3726dbbb6edfac0c2a4b58d23adb414f63f604440ba783fce5_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:fc9d7862ed6b0ce5ffe92cdaaee509b2ae161992b8f9bdfdb6865ccb04327d35_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:4a7c40e705dd0b17f4f91f29479b0818ed138e0442a65daa3292f5663dbfc52c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:694b88929ec77e63de90cd3dcb9f3e0899182f430c973d2b1367a2bec83e8b2f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acbe8a4b057e7e659e3d421634e9115b49a9a244e6c46a96e0f131a11cae167c_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acc41ca9440443de6018641e9d8c37a31fe32ab4e6747edd022cb8ed63d5bb0f_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0c38a05e03b0b4bcd6156c3c43667436cb2b31b41ea6c1a806ce062c4b051b1f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:1723204012943c8844d04645d564955d20cd22c720f06f33e7f86181454fea55_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:2dcc79c07726598b1c8a6b398d2da30503a3dae96e640963eb2b18a85a7dd7b2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8b784c0c62cbbc470c624f08b145a02a5054216398cf7d3554400a9ff926b7ed_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3e128932a688e7db59a8057bf9c2e84f01004143aaef5f8f8ee4cdfd33d90cfb_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3fa328a585adc80b2870d2841d3db177745c6b29605c69fb077f15cb49c63ba8_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:82ca34ecce0f6b9de413147167c5a2faec1f98b409c21a6fe7d00a56a1fef1f1_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f0d13754868e1f1d08523c2459e1f0a8b7c937e27da82b19b0f1ae73f989384d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:11f121479a915c5f59899f6e73afeeb299e3d6d0a1f091e7e87c51a373191093_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:25a5c98d72c1bdae4d2ecfef13433afe12897b2ec86f0609908fbf850700b884_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:2fc3444d7604901159a2f864dec6d59e3c2000bb7306c778591956c0a76b7ec5_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:bf49207dde3565ce593c0d276434c43e9fb9adcc950c3ccab53837e31ae27313_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a447e87fb55509fce9bfcf02b5571e87d9a002e331a20614bae17076ad544d3_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a7e5a72d2f82d60918e396a8cf3a973c479752de5e07bb8bd5bdbb9b1e1019c_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:51d2ba5a66f96afc8a61c6df1a147c67ca37a1aeeb9e0a40a9b3f8af56ea01e9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:7710bcfbeb5d4fe1dc98b9bb5cb3b99403fbcc2a680a159ba363530f48b8851d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:4f673d88ce055610c45123bef5c31446fdb8406d1d4969a643943f246e179c84_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:a3213419c43bfccc2fc55d9dd0115e464bd2fd8fb4e5a400cc3880f65198e9e3_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:c51e88125ea5402efd4d6d445089fe17d3e7c719d6cab72538eea0791dd2663a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:ed77f86958364fe53d8181e451581a77e242a4db791976fc7490cfcb454e589e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:8a6027f91f12a2ad6d50b64bf21fbf97a706be0fa3c05cce44df4bc1c6795462_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d313a31a1a0adde95eac4e0860b4a928a6c9c7bf00853214aa4b9c4a9be0365_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d0433de2bbd7bb21fdee82f3a0ac2f41c87675c8d525160f6697be4f52652cb6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:fcbe0ac15a63ac8b452b77c1900028e97b0237f946b3ecc9faf044168c5d7969_s390x	—	Workaround

Threats

Impact Important

CVE-2026-12185

A flaw was found in Bouncy Castle for Java. The BKS/UBER keystore component allocates memory based on untrusted length values before performing an integrity check. A remote attacker could exploit this vulnerability by providing a specially crafted keystore, leading to excessive memory allocation and a denial of service (DoS) condition.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-1284 - Improper Validation of Specified Quantity in Input

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0c38a05e03b0b4bcd6156c3c43667436cb2b31b41ea6c1a806ce062c4b051b1f_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:1723204012943c8844d04645d564955d20cd22c720f06f33e7f86181454fea55_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:2dcc79c07726598b1c8a6b398d2da30503a3dae96e640963eb2b18a85a7dd7b2_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8b784c0c62cbbc470c624f08b145a02a5054216398cf7d3554400a9ff926b7ed_amd64	—	Vendor Fix fix Workaround

Known not affected 57 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:3049a7248a4ad4d649b287aae877475deafeb7b6e1d0ecbec540f816e997b568_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:43a1bdbd4f337c81bc1a789c07d716e74a4a08f8e60374769ccd1bc202cef895_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:7e13f4dc4021d19696666d180d9d05ed4bad0ed1ae88e78562b5bbfad7adc314_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:f2c0813c6867724a82635c823a56077a8dd3b9322bcd6fcb0f4bf6dc05107a23_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:11c73dd00773e8df773a920d6b983649444630725b403720cc22f61dcbd9a88a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:12ee43f548b9bbc51657e77500f399dfef7ef633b5e162007d627246a773981f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:776d8fae8372638c1824a823eb5e5f9f76a1130493e979ffdeb0d5d1102b7542_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:956eeb6721b90d9024927c2afe185f9263329bd919a0ed9aa07d55d1b1deaab8_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:2e8188fdf97e15872ed626bd136071a20200791a879245ca911dcd1063b19732_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:5b0b6b676014f1c8d8ad5d6bc99aedadaf20b5846dc68c007026592541e9d29d_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:763324f7c02cc40a8217fc8daf103b5180d1be865fe8c366f877caae08ec0198_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:b72b4f747473061d4cea48ba76b318323e2d24714f020a6e7053ed641d864d76_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:01a0a766d5f13271a60cd6e2747760e4e9a741ef112fe5e9558fdc74ef2c5cff_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:169c11b438d9308b47b3ff9db32482b56581c725459393a04c3aeb2493743a8e_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:e054ba4dfbd318419796b9e604850ba3387b3485fa2e3d75e49d766e15574b42_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:fada2e23889911805c7122c6dc4571ecc4976b1a9250f2b300a532794e5499f9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3ce6e51c799e2453155058b1e21da125f9a1d1b7107d1cc6fc27bfe4bc4c6ce7_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1cb02a116a4e4ced10ce72ce7e33a8561bebbc3a193d9cfc9105ef02ae460486_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:3b26b0470955d4675172239466f4fb5c92a44b85eb830270bd8b7f6a1bb5b784_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:7ce60bc263471d3726dbbb6edfac0c2a4b58d23adb414f63f604440ba783fce5_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:fc9d7862ed6b0ce5ffe92cdaaee509b2ae161992b8f9bdfdb6865ccb04327d35_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:4a7c40e705dd0b17f4f91f29479b0818ed138e0442a65daa3292f5663dbfc52c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:694b88929ec77e63de90cd3dcb9f3e0899182f430c973d2b1367a2bec83e8b2f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acbe8a4b057e7e659e3d421634e9115b49a9a244e6c46a96e0f131a11cae167c_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acc41ca9440443de6018641e9d8c37a31fe32ab4e6747edd022cb8ed63d5bb0f_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3e128932a688e7db59a8057bf9c2e84f01004143aaef5f8f8ee4cdfd33d90cfb_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3fa328a585adc80b2870d2841d3db177745c6b29605c69fb077f15cb49c63ba8_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:82ca34ecce0f6b9de413147167c5a2faec1f98b409c21a6fe7d00a56a1fef1f1_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f0d13754868e1f1d08523c2459e1f0a8b7c937e27da82b19b0f1ae73f989384d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:11f121479a915c5f59899f6e73afeeb299e3d6d0a1f091e7e87c51a373191093_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:25a5c98d72c1bdae4d2ecfef13433afe12897b2ec86f0609908fbf850700b884_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:2fc3444d7604901159a2f864dec6d59e3c2000bb7306c778591956c0a76b7ec5_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:bf49207dde3565ce593c0d276434c43e9fb9adcc950c3ccab53837e31ae27313_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:0a5e6487fec86246ba15b38a6a3651c5cd9316d25044a3c2bdf5572d1ce5a00b_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:5cbe66e31707a799600e2927d127666f1a1a9ac69e31da0efa4aed0191bacb06_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bd9a950cc2a62fab1ce027a744868213c0dac138d46c37daa099a87121b17163_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c73227f14687284ed632c12fdee7db809573bf029785a7a5622f60b38a52fd88_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:46fb8a7bcf2378cb7ed3f6d1d9a8fd126d0a6b5eea6aad190d533d292b6fa5a2_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:47078d49a8f53c974e220017c77c1421421d73611ecd92303105812659106737_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:536a091643cba26882ea90dfb58582a2ecf6424b4bf763da3a678ae2c586bd0f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9f9f8ac5d0856e701c31912eaadba138b681a20f22d733254b82245ff7a8930c_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a447e87fb55509fce9bfcf02b5571e87d9a002e331a20614bae17076ad544d3_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a7e5a72d2f82d60918e396a8cf3a973c479752de5e07bb8bd5bdbb9b1e1019c_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:51d2ba5a66f96afc8a61c6df1a147c67ca37a1aeeb9e0a40a9b3f8af56ea01e9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:7710bcfbeb5d4fe1dc98b9bb5cb3b99403fbcc2a680a159ba363530f48b8851d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:4f673d88ce055610c45123bef5c31446fdb8406d1d4969a643943f246e179c84_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:a3213419c43bfccc2fc55d9dd0115e464bd2fd8fb4e5a400cc3880f65198e9e3_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:c51e88125ea5402efd4d6d445089fe17d3e7c719d6cab72538eea0791dd2663a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:ed77f86958364fe53d8181e451581a77e242a4db791976fc7490cfcb454e589e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:8a6027f91f12a2ad6d50b64bf21fbf97a706be0fa3c05cce44df4bc1c6795462_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d313a31a1a0adde95eac4e0860b4a928a6c9c7bf00853214aa4b9c4a9be0365_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d0433de2bbd7bb21fdee82f3a0ac2f41c87675c8d525160f6697be4f52652cb6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:fcbe0ac15a63ac8b452b77c1900028e97b0237f946b3ecc9faf044168c5d7969_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:2df809162682b8c568979cce1bb298f116f4dc3673bb5f8af1fcbdca8e90ce79_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:64ffe5b3c536feb240530d14a507e9a99ec04b79f4035ade2714d5bca32cf77b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:65c3ca83edd90f463d03a1df2d375f95c1e4f39e2329d565b9ae8a462153e51e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:77c4c66043157fe503b63c347b0e67099b8e4948b8bb35dc46283aef6460c60e_ppc64le	—	Workaround

Threats

Impact Moderate

CVE-2026-13697

A flaw was found in undici. This vulnerability allows for cross-user information disclosure when malformed Cache-Control private directives cause private response bodies and headers, such as Set-Cookie data, to be stored in a shared cache and subsequently exposed to other users. Additionally, a specially crafted Cache-Control header can trigger an unhandled error in the cache parser, leading to a process termination and a Denial of Service (DoS). Both issues affect applications using the cache interceptor in shared mode.

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H

CWE-524 - Use of Cache Containing Sensitive Information

Affected products

Fixed 16 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:3049a7248a4ad4d649b287aae877475deafeb7b6e1d0ecbec540f816e997b568_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:43a1bdbd4f337c81bc1a789c07d716e74a4a08f8e60374769ccd1bc202cef895_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:7e13f4dc4021d19696666d180d9d05ed4bad0ed1ae88e78562b5bbfad7adc314_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:f2c0813c6867724a82635c823a56077a8dd3b9322bcd6fcb0f4bf6dc05107a23_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:01a0a766d5f13271a60cd6e2747760e4e9a741ef112fe5e9558fdc74ef2c5cff_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:169c11b438d9308b47b3ff9db32482b56581c725459393a04c3aeb2493743a8e_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:e054ba4dfbd318419796b9e604850ba3387b3485fa2e3d75e49d766e15574b42_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:fada2e23889911805c7122c6dc4571ecc4976b1a9250f2b300a532794e5499f9_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:0a5e6487fec86246ba15b38a6a3651c5cd9316d25044a3c2bdf5572d1ce5a00b_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:5cbe66e31707a799600e2927d127666f1a1a9ac69e31da0efa4aed0191bacb06_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bd9a950cc2a62fab1ce027a744868213c0dac138d46c37daa099a87121b17163_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c73227f14687284ed632c12fdee7db809573bf029785a7a5622f60b38a52fd88_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:46fb8a7bcf2378cb7ed3f6d1d9a8fd126d0a6b5eea6aad190d533d292b6fa5a2_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:47078d49a8f53c974e220017c77c1421421d73611ecd92303105812659106737_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:536a091643cba26882ea90dfb58582a2ecf6424b4bf763da3a678ae2c586bd0f_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9f9f8ac5d0856e701c31912eaadba138b681a20f22d733254b82245ff7a8930c_ppc64le	—	Vendor Fix fix

Known not affected 45 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:11c73dd00773e8df773a920d6b983649444630725b403720cc22f61dcbd9a88a_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:12ee43f548b9bbc51657e77500f399dfef7ef633b5e162007d627246a773981f_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:776d8fae8372638c1824a823eb5e5f9f76a1130493e979ffdeb0d5d1102b7542_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:956eeb6721b90d9024927c2afe185f9263329bd919a0ed9aa07d55d1b1deaab8_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:2e8188fdf97e15872ed626bd136071a20200791a879245ca911dcd1063b19732_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:5b0b6b676014f1c8d8ad5d6bc99aedadaf20b5846dc68c007026592541e9d29d_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:763324f7c02cc40a8217fc8daf103b5180d1be865fe8c366f877caae08ec0198_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:b72b4f747473061d4cea48ba76b318323e2d24714f020a6e7053ed641d864d76_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3ce6e51c799e2453155058b1e21da125f9a1d1b7107d1cc6fc27bfe4bc4c6ce7_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1cb02a116a4e4ced10ce72ce7e33a8561bebbc3a193d9cfc9105ef02ae460486_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:3b26b0470955d4675172239466f4fb5c92a44b85eb830270bd8b7f6a1bb5b784_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:7ce60bc263471d3726dbbb6edfac0c2a4b58d23adb414f63f604440ba783fce5_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:fc9d7862ed6b0ce5ffe92cdaaee509b2ae161992b8f9bdfdb6865ccb04327d35_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:4a7c40e705dd0b17f4f91f29479b0818ed138e0442a65daa3292f5663dbfc52c_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:694b88929ec77e63de90cd3dcb9f3e0899182f430c973d2b1367a2bec83e8b2f_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acbe8a4b057e7e659e3d421634e9115b49a9a244e6c46a96e0f131a11cae167c_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acc41ca9440443de6018641e9d8c37a31fe32ab4e6747edd022cb8ed63d5bb0f_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0c38a05e03b0b4bcd6156c3c43667436cb2b31b41ea6c1a806ce062c4b051b1f_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:1723204012943c8844d04645d564955d20cd22c720f06f33e7f86181454fea55_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:2dcc79c07726598b1c8a6b398d2da30503a3dae96e640963eb2b18a85a7dd7b2_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8b784c0c62cbbc470c624f08b145a02a5054216398cf7d3554400a9ff926b7ed_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3e128932a688e7db59a8057bf9c2e84f01004143aaef5f8f8ee4cdfd33d90cfb_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3fa328a585adc80b2870d2841d3db177745c6b29605c69fb077f15cb49c63ba8_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:82ca34ecce0f6b9de413147167c5a2faec1f98b409c21a6fe7d00a56a1fef1f1_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f0d13754868e1f1d08523c2459e1f0a8b7c937e27da82b19b0f1ae73f989384d_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:11f121479a915c5f59899f6e73afeeb299e3d6d0a1f091e7e87c51a373191093_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:25a5c98d72c1bdae4d2ecfef13433afe12897b2ec86f0609908fbf850700b884_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:2fc3444d7604901159a2f864dec6d59e3c2000bb7306c778591956c0a76b7ec5_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:bf49207dde3565ce593c0d276434c43e9fb9adcc950c3ccab53837e31ae27313_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a447e87fb55509fce9bfcf02b5571e87d9a002e331a20614bae17076ad544d3_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a7e5a72d2f82d60918e396a8cf3a973c479752de5e07bb8bd5bdbb9b1e1019c_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:51d2ba5a66f96afc8a61c6df1a147c67ca37a1aeeb9e0a40a9b3f8af56ea01e9_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:7710bcfbeb5d4fe1dc98b9bb5cb3b99403fbcc2a680a159ba363530f48b8851d_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:4f673d88ce055610c45123bef5c31446fdb8406d1d4969a643943f246e179c84_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:a3213419c43bfccc2fc55d9dd0115e464bd2fd8fb4e5a400cc3880f65198e9e3_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:c51e88125ea5402efd4d6d445089fe17d3e7c719d6cab72538eea0791dd2663a_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:ed77f86958364fe53d8181e451581a77e242a4db791976fc7490cfcb454e589e_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:8a6027f91f12a2ad6d50b64bf21fbf97a706be0fa3c05cce44df4bc1c6795462_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d313a31a1a0adde95eac4e0860b4a928a6c9c7bf00853214aa4b9c4a9be0365_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d0433de2bbd7bb21fdee82f3a0ac2f41c87675c8d525160f6697be4f52652cb6_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:fcbe0ac15a63ac8b452b77c1900028e97b0237f946b3ecc9faf044168c5d7969_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:2df809162682b8c568979cce1bb298f116f4dc3673bb5f8af1fcbdca8e90ce79_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:64ffe5b3c536feb240530d14a507e9a99ec04b79f4035ade2714d5bca32cf77b_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:65c3ca83edd90f463d03a1df2d375f95c1e4f39e2329d565b9ae8a462153e51e_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:77c4c66043157fe503b63c347b0e67099b8e4948b8bb35dc46283aef6460c60e_ppc64le		—

Threats

Impact Important

CVE-2026-14682

A flaw was found in Bouncy Castle for Java, including its LTS and FIPS variants. This vulnerability allows a remote attacker to trigger an Out-Of-Memory (OOM) error by providing specially crafted input during a definite-length read operation. This unbounded memory allocation can lead to a Denial of Service (DoS), making the affected system or application unavailable.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 12 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0c38a05e03b0b4bcd6156c3c43667436cb2b31b41ea6c1a806ce062c4b051b1f_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:1723204012943c8844d04645d564955d20cd22c720f06f33e7f86181454fea55_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:2dcc79c07726598b1c8a6b398d2da30503a3dae96e640963eb2b18a85a7dd7b2_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8b784c0c62cbbc470c624f08b145a02a5054216398cf7d3554400a9ff926b7ed_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:0a5e6487fec86246ba15b38a6a3651c5cd9316d25044a3c2bdf5572d1ce5a00b_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:5cbe66e31707a799600e2927d127666f1a1a9ac69e31da0efa4aed0191bacb06_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bd9a950cc2a62fab1ce027a744868213c0dac138d46c37daa099a87121b17163_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c73227f14687284ed632c12fdee7db809573bf029785a7a5622f60b38a52fd88_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:46fb8a7bcf2378cb7ed3f6d1d9a8fd126d0a6b5eea6aad190d533d292b6fa5a2_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:47078d49a8f53c974e220017c77c1421421d73611ecd92303105812659106737_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:536a091643cba26882ea90dfb58582a2ecf6424b4bf763da3a678ae2c586bd0f_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9f9f8ac5d0856e701c31912eaadba138b681a20f22d733254b82245ff7a8930c_ppc64le	—	Vendor Fix fix Workaround

Known not affected 49 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:3049a7248a4ad4d649b287aae877475deafeb7b6e1d0ecbec540f816e997b568_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:43a1bdbd4f337c81bc1a789c07d716e74a4a08f8e60374769ccd1bc202cef895_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:7e13f4dc4021d19696666d180d9d05ed4bad0ed1ae88e78562b5bbfad7adc314_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:f2c0813c6867724a82635c823a56077a8dd3b9322bcd6fcb0f4bf6dc05107a23_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:11c73dd00773e8df773a920d6b983649444630725b403720cc22f61dcbd9a88a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:12ee43f548b9bbc51657e77500f399dfef7ef633b5e162007d627246a773981f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:776d8fae8372638c1824a823eb5e5f9f76a1130493e979ffdeb0d5d1102b7542_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:956eeb6721b90d9024927c2afe185f9263329bd919a0ed9aa07d55d1b1deaab8_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:2e8188fdf97e15872ed626bd136071a20200791a879245ca911dcd1063b19732_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:5b0b6b676014f1c8d8ad5d6bc99aedadaf20b5846dc68c007026592541e9d29d_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:763324f7c02cc40a8217fc8daf103b5180d1be865fe8c366f877caae08ec0198_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:b72b4f747473061d4cea48ba76b318323e2d24714f020a6e7053ed641d864d76_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:01a0a766d5f13271a60cd6e2747760e4e9a741ef112fe5e9558fdc74ef2c5cff_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:169c11b438d9308b47b3ff9db32482b56581c725459393a04c3aeb2493743a8e_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:e054ba4dfbd318419796b9e604850ba3387b3485fa2e3d75e49d766e15574b42_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:fada2e23889911805c7122c6dc4571ecc4976b1a9250f2b300a532794e5499f9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3ce6e51c799e2453155058b1e21da125f9a1d1b7107d1cc6fc27bfe4bc4c6ce7_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1cb02a116a4e4ced10ce72ce7e33a8561bebbc3a193d9cfc9105ef02ae460486_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:3b26b0470955d4675172239466f4fb5c92a44b85eb830270bd8b7f6a1bb5b784_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:7ce60bc263471d3726dbbb6edfac0c2a4b58d23adb414f63f604440ba783fce5_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:fc9d7862ed6b0ce5ffe92cdaaee509b2ae161992b8f9bdfdb6865ccb04327d35_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:4a7c40e705dd0b17f4f91f29479b0818ed138e0442a65daa3292f5663dbfc52c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:694b88929ec77e63de90cd3dcb9f3e0899182f430c973d2b1367a2bec83e8b2f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acbe8a4b057e7e659e3d421634e9115b49a9a244e6c46a96e0f131a11cae167c_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acc41ca9440443de6018641e9d8c37a31fe32ab4e6747edd022cb8ed63d5bb0f_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3e128932a688e7db59a8057bf9c2e84f01004143aaef5f8f8ee4cdfd33d90cfb_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3fa328a585adc80b2870d2841d3db177745c6b29605c69fb077f15cb49c63ba8_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:82ca34ecce0f6b9de413147167c5a2faec1f98b409c21a6fe7d00a56a1fef1f1_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f0d13754868e1f1d08523c2459e1f0a8b7c937e27da82b19b0f1ae73f989384d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:11f121479a915c5f59899f6e73afeeb299e3d6d0a1f091e7e87c51a373191093_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:25a5c98d72c1bdae4d2ecfef13433afe12897b2ec86f0609908fbf850700b884_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:2fc3444d7604901159a2f864dec6d59e3c2000bb7306c778591956c0a76b7ec5_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:bf49207dde3565ce593c0d276434c43e9fb9adcc950c3ccab53837e31ae27313_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a447e87fb55509fce9bfcf02b5571e87d9a002e331a20614bae17076ad544d3_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a7e5a72d2f82d60918e396a8cf3a973c479752de5e07bb8bd5bdbb9b1e1019c_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:51d2ba5a66f96afc8a61c6df1a147c67ca37a1aeeb9e0a40a9b3f8af56ea01e9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:7710bcfbeb5d4fe1dc98b9bb5cb3b99403fbcc2a680a159ba363530f48b8851d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:4f673d88ce055610c45123bef5c31446fdb8406d1d4969a643943f246e179c84_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:a3213419c43bfccc2fc55d9dd0115e464bd2fd8fb4e5a400cc3880f65198e9e3_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:c51e88125ea5402efd4d6d445089fe17d3e7c719d6cab72538eea0791dd2663a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:ed77f86958364fe53d8181e451581a77e242a4db791976fc7490cfcb454e589e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:8a6027f91f12a2ad6d50b64bf21fbf97a706be0fa3c05cce44df4bc1c6795462_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d313a31a1a0adde95eac4e0860b4a928a6c9c7bf00853214aa4b9c4a9be0365_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d0433de2bbd7bb21fdee82f3a0ac2f41c87675c8d525160f6697be4f52652cb6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:fcbe0ac15a63ac8b452b77c1900028e97b0237f946b3ecc9faf044168c5d7969_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:2df809162682b8c568979cce1bb298f116f4dc3673bb5f8af1fcbdca8e90ce79_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:64ffe5b3c536feb240530d14a507e9a99ec04b79f4035ade2714d5bca32cf77b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:65c3ca83edd90f463d03a1df2d375f95c1e4f39e2329d565b9ae8a462153e51e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:77c4c66043157fe503b63c347b0e67099b8e4948b8bb35dc46283aef6460c60e_ppc64le	—	Workaround

Threats

Impact Important

CVE-2026-15076

A flaw was found in Eclipse Vert.x Web Client. The WebClientSession component does not properly validate the Domain attribute of a Set-Cookie response header against the originating server's domain. This vulnerability allows a remote attacker to inject a cookie scoped to an arbitrary third-party domain. When the victim application subsequently sends a request to the targeted domain, the injected cookie is presented, potentially leading to information disclosure and unauthorized access to sensitive data through the attacker's account on that service.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-346 - Origin Validation Error

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3e128932a688e7db59a8057bf9c2e84f01004143aaef5f8f8ee4cdfd33d90cfb_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3fa328a585adc80b2870d2841d3db177745c6b29605c69fb077f15cb49c63ba8_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:82ca34ecce0f6b9de413147167c5a2faec1f98b409c21a6fe7d00a56a1fef1f1_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f0d13754868e1f1d08523c2459e1f0a8b7c937e27da82b19b0f1ae73f989384d_amd64	—	Vendor Fix fix Workaround

Known not affected 57 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:3049a7248a4ad4d649b287aae877475deafeb7b6e1d0ecbec540f816e997b568_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:43a1bdbd4f337c81bc1a789c07d716e74a4a08f8e60374769ccd1bc202cef895_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:7e13f4dc4021d19696666d180d9d05ed4bad0ed1ae88e78562b5bbfad7adc314_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:f2c0813c6867724a82635c823a56077a8dd3b9322bcd6fcb0f4bf6dc05107a23_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:11c73dd00773e8df773a920d6b983649444630725b403720cc22f61dcbd9a88a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:12ee43f548b9bbc51657e77500f399dfef7ef633b5e162007d627246a773981f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:776d8fae8372638c1824a823eb5e5f9f76a1130493e979ffdeb0d5d1102b7542_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:956eeb6721b90d9024927c2afe185f9263329bd919a0ed9aa07d55d1b1deaab8_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:2e8188fdf97e15872ed626bd136071a20200791a879245ca911dcd1063b19732_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:5b0b6b676014f1c8d8ad5d6bc99aedadaf20b5846dc68c007026592541e9d29d_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:763324f7c02cc40a8217fc8daf103b5180d1be865fe8c366f877caae08ec0198_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:b72b4f747473061d4cea48ba76b318323e2d24714f020a6e7053ed641d864d76_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:01a0a766d5f13271a60cd6e2747760e4e9a741ef112fe5e9558fdc74ef2c5cff_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:169c11b438d9308b47b3ff9db32482b56581c725459393a04c3aeb2493743a8e_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:e054ba4dfbd318419796b9e604850ba3387b3485fa2e3d75e49d766e15574b42_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:fada2e23889911805c7122c6dc4571ecc4976b1a9250f2b300a532794e5499f9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3ce6e51c799e2453155058b1e21da125f9a1d1b7107d1cc6fc27bfe4bc4c6ce7_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1cb02a116a4e4ced10ce72ce7e33a8561bebbc3a193d9cfc9105ef02ae460486_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:3b26b0470955d4675172239466f4fb5c92a44b85eb830270bd8b7f6a1bb5b784_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:7ce60bc263471d3726dbbb6edfac0c2a4b58d23adb414f63f604440ba783fce5_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:fc9d7862ed6b0ce5ffe92cdaaee509b2ae161992b8f9bdfdb6865ccb04327d35_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:4a7c40e705dd0b17f4f91f29479b0818ed138e0442a65daa3292f5663dbfc52c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:694b88929ec77e63de90cd3dcb9f3e0899182f430c973d2b1367a2bec83e8b2f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acbe8a4b057e7e659e3d421634e9115b49a9a244e6c46a96e0f131a11cae167c_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acc41ca9440443de6018641e9d8c37a31fe32ab4e6747edd022cb8ed63d5bb0f_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0c38a05e03b0b4bcd6156c3c43667436cb2b31b41ea6c1a806ce062c4b051b1f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:1723204012943c8844d04645d564955d20cd22c720f06f33e7f86181454fea55_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:2dcc79c07726598b1c8a6b398d2da30503a3dae96e640963eb2b18a85a7dd7b2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8b784c0c62cbbc470c624f08b145a02a5054216398cf7d3554400a9ff926b7ed_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:11f121479a915c5f59899f6e73afeeb299e3d6d0a1f091e7e87c51a373191093_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:25a5c98d72c1bdae4d2ecfef13433afe12897b2ec86f0609908fbf850700b884_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:2fc3444d7604901159a2f864dec6d59e3c2000bb7306c778591956c0a76b7ec5_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:bf49207dde3565ce593c0d276434c43e9fb9adcc950c3ccab53837e31ae27313_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:0a5e6487fec86246ba15b38a6a3651c5cd9316d25044a3c2bdf5572d1ce5a00b_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:5cbe66e31707a799600e2927d127666f1a1a9ac69e31da0efa4aed0191bacb06_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bd9a950cc2a62fab1ce027a744868213c0dac138d46c37daa099a87121b17163_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c73227f14687284ed632c12fdee7db809573bf029785a7a5622f60b38a52fd88_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:46fb8a7bcf2378cb7ed3f6d1d9a8fd126d0a6b5eea6aad190d533d292b6fa5a2_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:47078d49a8f53c974e220017c77c1421421d73611ecd92303105812659106737_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:536a091643cba26882ea90dfb58582a2ecf6424b4bf763da3a678ae2c586bd0f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9f9f8ac5d0856e701c31912eaadba138b681a20f22d733254b82245ff7a8930c_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a447e87fb55509fce9bfcf02b5571e87d9a002e331a20614bae17076ad544d3_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a7e5a72d2f82d60918e396a8cf3a973c479752de5e07bb8bd5bdbb9b1e1019c_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:51d2ba5a66f96afc8a61c6df1a147c67ca37a1aeeb9e0a40a9b3f8af56ea01e9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:7710bcfbeb5d4fe1dc98b9bb5cb3b99403fbcc2a680a159ba363530f48b8851d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:4f673d88ce055610c45123bef5c31446fdb8406d1d4969a643943f246e179c84_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:a3213419c43bfccc2fc55d9dd0115e464bd2fd8fb4e5a400cc3880f65198e9e3_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:c51e88125ea5402efd4d6d445089fe17d3e7c719d6cab72538eea0791dd2663a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:ed77f86958364fe53d8181e451581a77e242a4db791976fc7490cfcb454e589e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:8a6027f91f12a2ad6d50b64bf21fbf97a706be0fa3c05cce44df4bc1c6795462_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d313a31a1a0adde95eac4e0860b4a928a6c9c7bf00853214aa4b9c4a9be0365_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d0433de2bbd7bb21fdee82f3a0ac2f41c87675c8d525160f6697be4f52652cb6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:fcbe0ac15a63ac8b452b77c1900028e97b0237f946b3ecc9faf044168c5d7969_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:2df809162682b8c568979cce1bb298f116f4dc3673bb5f8af1fcbdca8e90ce79_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:64ffe5b3c536feb240530d14a507e9a99ec04b79f4035ade2714d5bca32cf77b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:65c3ca83edd90f463d03a1df2d375f95c1e4f39e2329d565b9ae8a462153e51e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:77c4c66043157fe503b63c347b0e67099b8e4948b8bb35dc46283aef6460c60e_ppc64le	—	Workaround

Threats

Impact Important

CVE-2026-16308

A flaw was found in Quarkus REST. An unauthenticated remote attacker can exploit this vulnerability by sending a crafted multipart/form-data request with an excessively large header section. This unbounded accumulation of MIME part-header bytes can exhaust the Java Virtual Machine (JVM) heap memory, leading to an OutOfMemoryError. The primary consequence is a denial of service, causing the application to crash.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products, the same list as for CVE-2026-15076

Known not affected 57 products, the same list as for CVE-2026-15076

Threats

Impact Important

CVE-2026-17106

A flaw was found in moby/go-archive. The tar extraction routines in the component do not properly restrict filesystem operations to the intended destination directory. An attacker who controls the contents of an archive can exploit this by including symbolic links, allowing them to create or overwrite files at arbitrary locations on the system where the archive is being extracted. This could lead to unauthorized modification of system files or potentially arbitrary code execution.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:4f673d88ce055610c45123bef5c31446fdb8406d1d4969a643943f246e179c84_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:a3213419c43bfccc2fc55d9dd0115e464bd2fd8fb4e5a400cc3880f65198e9e3_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:c51e88125ea5402efd4d6d445089fe17d3e7c719d6cab72538eea0791dd2663a_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:ed77f86958364fe53d8181e451581a77e242a4db791976fc7490cfcb454e589e_amd64	—	Vendor Fix fix Workaround

Known not affected 57 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:3049a7248a4ad4d649b287aae877475deafeb7b6e1d0ecbec540f816e997b568_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:43a1bdbd4f337c81bc1a789c07d716e74a4a08f8e60374769ccd1bc202cef895_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:7e13f4dc4021d19696666d180d9d05ed4bad0ed1ae88e78562b5bbfad7adc314_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:f2c0813c6867724a82635c823a56077a8dd3b9322bcd6fcb0f4bf6dc05107a23_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:11c73dd00773e8df773a920d6b983649444630725b403720cc22f61dcbd9a88a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:12ee43f548b9bbc51657e77500f399dfef7ef633b5e162007d627246a773981f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:776d8fae8372638c1824a823eb5e5f9f76a1130493e979ffdeb0d5d1102b7542_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:956eeb6721b90d9024927c2afe185f9263329bd919a0ed9aa07d55d1b1deaab8_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:2e8188fdf97e15872ed626bd136071a20200791a879245ca911dcd1063b19732_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:5b0b6b676014f1c8d8ad5d6bc99aedadaf20b5846dc68c007026592541e9d29d_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:763324f7c02cc40a8217fc8daf103b5180d1be865fe8c366f877caae08ec0198_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:b72b4f747473061d4cea48ba76b318323e2d24714f020a6e7053ed641d864d76_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:01a0a766d5f13271a60cd6e2747760e4e9a741ef112fe5e9558fdc74ef2c5cff_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:169c11b438d9308b47b3ff9db32482b56581c725459393a04c3aeb2493743a8e_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:e054ba4dfbd318419796b9e604850ba3387b3485fa2e3d75e49d766e15574b42_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:fada2e23889911805c7122c6dc4571ecc4976b1a9250f2b300a532794e5499f9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3ce6e51c799e2453155058b1e21da125f9a1d1b7107d1cc6fc27bfe4bc4c6ce7_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1cb02a116a4e4ced10ce72ce7e33a8561bebbc3a193d9cfc9105ef02ae460486_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:3b26b0470955d4675172239466f4fb5c92a44b85eb830270bd8b7f6a1bb5b784_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:7ce60bc263471d3726dbbb6edfac0c2a4b58d23adb414f63f604440ba783fce5_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:fc9d7862ed6b0ce5ffe92cdaaee509b2ae161992b8f9bdfdb6865ccb04327d35_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:4a7c40e705dd0b17f4f91f29479b0818ed138e0442a65daa3292f5663dbfc52c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:694b88929ec77e63de90cd3dcb9f3e0899182f430c973d2b1367a2bec83e8b2f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acbe8a4b057e7e659e3d421634e9115b49a9a244e6c46a96e0f131a11cae167c_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acc41ca9440443de6018641e9d8c37a31fe32ab4e6747edd022cb8ed63d5bb0f_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0c38a05e03b0b4bcd6156c3c43667436cb2b31b41ea6c1a806ce062c4b051b1f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:1723204012943c8844d04645d564955d20cd22c720f06f33e7f86181454fea55_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:2dcc79c07726598b1c8a6b398d2da30503a3dae96e640963eb2b18a85a7dd7b2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8b784c0c62cbbc470c624f08b145a02a5054216398cf7d3554400a9ff926b7ed_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3e128932a688e7db59a8057bf9c2e84f01004143aaef5f8f8ee4cdfd33d90cfb_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3fa328a585adc80b2870d2841d3db177745c6b29605c69fb077f15cb49c63ba8_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:82ca34ecce0f6b9de413147167c5a2faec1f98b409c21a6fe7d00a56a1fef1f1_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f0d13754868e1f1d08523c2459e1f0a8b7c937e27da82b19b0f1ae73f989384d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:11f121479a915c5f59899f6e73afeeb299e3d6d0a1f091e7e87c51a373191093_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:25a5c98d72c1bdae4d2ecfef13433afe12897b2ec86f0609908fbf850700b884_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:2fc3444d7604901159a2f864dec6d59e3c2000bb7306c778591956c0a76b7ec5_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:bf49207dde3565ce593c0d276434c43e9fb9adcc950c3ccab53837e31ae27313_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:0a5e6487fec86246ba15b38a6a3651c5cd9316d25044a3c2bdf5572d1ce5a00b_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:5cbe66e31707a799600e2927d127666f1a1a9ac69e31da0efa4aed0191bacb06_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bd9a950cc2a62fab1ce027a744868213c0dac138d46c37daa099a87121b17163_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c73227f14687284ed632c12fdee7db809573bf029785a7a5622f60b38a52fd88_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:46fb8a7bcf2378cb7ed3f6d1d9a8fd126d0a6b5eea6aad190d533d292b6fa5a2_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:47078d49a8f53c974e220017c77c1421421d73611ecd92303105812659106737_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:536a091643cba26882ea90dfb58582a2ecf6424b4bf763da3a678ae2c586bd0f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9f9f8ac5d0856e701c31912eaadba138b681a20f22d733254b82245ff7a8930c_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a447e87fb55509fce9bfcf02b5571e87d9a002e331a20614bae17076ad544d3_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a7e5a72d2f82d60918e396a8cf3a973c479752de5e07bb8bd5bdbb9b1e1019c_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:51d2ba5a66f96afc8a61c6df1a147c67ca37a1aeeb9e0a40a9b3f8af56ea01e9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:7710bcfbeb5d4fe1dc98b9bb5cb3b99403fbcc2a680a159ba363530f48b8851d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:8a6027f91f12a2ad6d50b64bf21fbf97a706be0fa3c05cce44df4bc1c6795462_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d313a31a1a0adde95eac4e0860b4a928a6c9c7bf00853214aa4b9c4a9be0365_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d0433de2bbd7bb21fdee82f3a0ac2f41c87675c8d525160f6697be4f52652cb6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:fcbe0ac15a63ac8b452b77c1900028e97b0237f946b3ecc9faf044168c5d7969_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:2df809162682b8c568979cce1bb298f116f4dc3673bb5f8af1fcbdca8e90ce79_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:64ffe5b3c536feb240530d14a507e9a99ec04b79f4035ade2714d5bca32cf77b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:65c3ca83edd90f463d03a1df2d375f95c1e4f39e2329d565b9ae8a462153e51e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:77c4c66043157fe503b63c347b0e67099b8e4948b8bb35dc46283aef6460c60e_ppc64le	—	Workaround

Threats

Impact Important

CVE-2026-18427

A flaw was found in @fastify/static. An unauthenticated attacker can bypass route-based guards by using non-canonical path segments in a request. This allows the attacker to access and disclose the contents of files that should be protected by these guards. The vulnerability stems from the static file handler's failure to properly canonicalize various path forms, such as dot segments, duplicate slashes, encoded dots, or backslashes, before matching routes and serving files.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-41 - Improper Resolution of Path Equivalence

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:01a0a766d5f13271a60cd6e2747760e4e9a741ef112fe5e9558fdc74ef2c5cff_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:169c11b438d9308b47b3ff9db32482b56581c725459393a04c3aeb2493743a8e_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:e054ba4dfbd318419796b9e604850ba3387b3485fa2e3d75e49d766e15574b42_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:fada2e23889911805c7122c6dc4571ecc4976b1a9250f2b300a532794e5499f9_ppc64le	—	Vendor Fix fix Workaround

Known not affected 57 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:3049a7248a4ad4d649b287aae877475deafeb7b6e1d0ecbec540f816e997b568_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:43a1bdbd4f337c81bc1a789c07d716e74a4a08f8e60374769ccd1bc202cef895_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:7e13f4dc4021d19696666d180d9d05ed4bad0ed1ae88e78562b5bbfad7adc314_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:f2c0813c6867724a82635c823a56077a8dd3b9322bcd6fcb0f4bf6dc05107a23_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:11c73dd00773e8df773a920d6b983649444630725b403720cc22f61dcbd9a88a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:12ee43f548b9bbc51657e77500f399dfef7ef633b5e162007d627246a773981f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:776d8fae8372638c1824a823eb5e5f9f76a1130493e979ffdeb0d5d1102b7542_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:956eeb6721b90d9024927c2afe185f9263329bd919a0ed9aa07d55d1b1deaab8_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:2e8188fdf97e15872ed626bd136071a20200791a879245ca911dcd1063b19732_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:5b0b6b676014f1c8d8ad5d6bc99aedadaf20b5846dc68c007026592541e9d29d_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:763324f7c02cc40a8217fc8daf103b5180d1be865fe8c366f877caae08ec0198_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:b72b4f747473061d4cea48ba76b318323e2d24714f020a6e7053ed641d864d76_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3ce6e51c799e2453155058b1e21da125f9a1d1b7107d1cc6fc27bfe4bc4c6ce7_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1cb02a116a4e4ced10ce72ce7e33a8561bebbc3a193d9cfc9105ef02ae460486_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:3b26b0470955d4675172239466f4fb5c92a44b85eb830270bd8b7f6a1bb5b784_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:7ce60bc263471d3726dbbb6edfac0c2a4b58d23adb414f63f604440ba783fce5_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:fc9d7862ed6b0ce5ffe92cdaaee509b2ae161992b8f9bdfdb6865ccb04327d35_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:4a7c40e705dd0b17f4f91f29479b0818ed138e0442a65daa3292f5663dbfc52c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:694b88929ec77e63de90cd3dcb9f3e0899182f430c973d2b1367a2bec83e8b2f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acbe8a4b057e7e659e3d421634e9115b49a9a244e6c46a96e0f131a11cae167c_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acc41ca9440443de6018641e9d8c37a31fe32ab4e6747edd022cb8ed63d5bb0f_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0c38a05e03b0b4bcd6156c3c43667436cb2b31b41ea6c1a806ce062c4b051b1f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:1723204012943c8844d04645d564955d20cd22c720f06f33e7f86181454fea55_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:2dcc79c07726598b1c8a6b398d2da30503a3dae96e640963eb2b18a85a7dd7b2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8b784c0c62cbbc470c624f08b145a02a5054216398cf7d3554400a9ff926b7ed_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3e128932a688e7db59a8057bf9c2e84f01004143aaef5f8f8ee4cdfd33d90cfb_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3fa328a585adc80b2870d2841d3db177745c6b29605c69fb077f15cb49c63ba8_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:82ca34ecce0f6b9de413147167c5a2faec1f98b409c21a6fe7d00a56a1fef1f1_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f0d13754868e1f1d08523c2459e1f0a8b7c937e27da82b19b0f1ae73f989384d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:11f121479a915c5f59899f6e73afeeb299e3d6d0a1f091e7e87c51a373191093_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:25a5c98d72c1bdae4d2ecfef13433afe12897b2ec86f0609908fbf850700b884_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:2fc3444d7604901159a2f864dec6d59e3c2000bb7306c778591956c0a76b7ec5_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:bf49207dde3565ce593c0d276434c43e9fb9adcc950c3ccab53837e31ae27313_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:0a5e6487fec86246ba15b38a6a3651c5cd9316d25044a3c2bdf5572d1ce5a00b_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:5cbe66e31707a799600e2927d127666f1a1a9ac69e31da0efa4aed0191bacb06_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bd9a950cc2a62fab1ce027a744868213c0dac138d46c37daa099a87121b17163_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c73227f14687284ed632c12fdee7db809573bf029785a7a5622f60b38a52fd88_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:46fb8a7bcf2378cb7ed3f6d1d9a8fd126d0a6b5eea6aad190d533d292b6fa5a2_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:47078d49a8f53c974e220017c77c1421421d73611ecd92303105812659106737_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:536a091643cba26882ea90dfb58582a2ecf6424b4bf763da3a678ae2c586bd0f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9f9f8ac5d0856e701c31912eaadba138b681a20f22d733254b82245ff7a8930c_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a447e87fb55509fce9bfcf02b5571e87d9a002e331a20614bae17076ad544d3_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a7e5a72d2f82d60918e396a8cf3a973c479752de5e07bb8bd5bdbb9b1e1019c_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:51d2ba5a66f96afc8a61c6df1a147c67ca37a1aeeb9e0a40a9b3f8af56ea01e9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:7710bcfbeb5d4fe1dc98b9bb5cb3b99403fbcc2a680a159ba363530f48b8851d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:4f673d88ce055610c45123bef5c31446fdb8406d1d4969a643943f246e179c84_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:a3213419c43bfccc2fc55d9dd0115e464bd2fd8fb4e5a400cc3880f65198e9e3_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:c51e88125ea5402efd4d6d445089fe17d3e7c719d6cab72538eea0791dd2663a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:ed77f86958364fe53d8181e451581a77e242a4db791976fc7490cfcb454e589e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:8a6027f91f12a2ad6d50b64bf21fbf97a706be0fa3c05cce44df4bc1c6795462_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d313a31a1a0adde95eac4e0860b4a928a6c9c7bf00853214aa4b9c4a9be0365_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d0433de2bbd7bb21fdee82f3a0ac2f41c87675c8d525160f6697be4f52652cb6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:fcbe0ac15a63ac8b452b77c1900028e97b0237f946b3ecc9faf044168c5d7969_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:2df809162682b8c568979cce1bb298f116f4dc3673bb5f8af1fcbdca8e90ce79_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:64ffe5b3c536feb240530d14a507e9a99ec04b79f4035ade2714d5bca32cf77b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:65c3ca83edd90f463d03a1df2d375f95c1e4f39e2329d565b9ae8a462153e51e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:77c4c66043157fe503b63c347b0e67099b8e4948b8bb35dc46283aef6460c60e_ppc64le	—	Workaround

Threats

Impact Important

CVE-2026-19203

A flaw was found in Jetty. A remote attacker can exploit this vulnerability by sending specially crafted HTTP/1.1 chunked requests. This can cause Jetty and an intermediary proxy to interpret different request boundaries, potentially leading to HTTP request smuggling. This issue arises from Jetty's acceptance of a lone Line Feed (LF) character as a terminator during chunked request parsing.

8.2 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:0a5e6487fec86246ba15b38a6a3651c5cd9316d25044a3c2bdf5572d1ce5a00b_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:5cbe66e31707a799600e2927d127666f1a1a9ac69e31da0efa4aed0191bacb06_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bd9a950cc2a62fab1ce027a744868213c0dac138d46c37daa099a87121b17163_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c73227f14687284ed632c12fdee7db809573bf029785a7a5622f60b38a52fd88_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:46fb8a7bcf2378cb7ed3f6d1d9a8fd126d0a6b5eea6aad190d533d292b6fa5a2_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:47078d49a8f53c974e220017c77c1421421d73611ecd92303105812659106737_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:536a091643cba26882ea90dfb58582a2ecf6424b4bf763da3a678ae2c586bd0f_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9f9f8ac5d0856e701c31912eaadba138b681a20f22d733254b82245ff7a8930c_ppc64le	—	Vendor Fix fix Workaround

Known not affected 53 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:3049a7248a4ad4d649b287aae877475deafeb7b6e1d0ecbec540f816e997b568_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:43a1bdbd4f337c81bc1a789c07d716e74a4a08f8e60374769ccd1bc202cef895_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:7e13f4dc4021d19696666d180d9d05ed4bad0ed1ae88e78562b5bbfad7adc314_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:f2c0813c6867724a82635c823a56077a8dd3b9322bcd6fcb0f4bf6dc05107a23_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:11c73dd00773e8df773a920d6b983649444630725b403720cc22f61dcbd9a88a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:12ee43f548b9bbc51657e77500f399dfef7ef633b5e162007d627246a773981f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:776d8fae8372638c1824a823eb5e5f9f76a1130493e979ffdeb0d5d1102b7542_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:956eeb6721b90d9024927c2afe185f9263329bd919a0ed9aa07d55d1b1deaab8_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:2e8188fdf97e15872ed626bd136071a20200791a879245ca911dcd1063b19732_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:5b0b6b676014f1c8d8ad5d6bc99aedadaf20b5846dc68c007026592541e9d29d_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:763324f7c02cc40a8217fc8daf103b5180d1be865fe8c366f877caae08ec0198_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:b72b4f747473061d4cea48ba76b318323e2d24714f020a6e7053ed641d864d76_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:01a0a766d5f13271a60cd6e2747760e4e9a741ef112fe5e9558fdc74ef2c5cff_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:169c11b438d9308b47b3ff9db32482b56581c725459393a04c3aeb2493743a8e_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:e054ba4dfbd318419796b9e604850ba3387b3485fa2e3d75e49d766e15574b42_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:fada2e23889911805c7122c6dc4571ecc4976b1a9250f2b300a532794e5499f9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3ce6e51c799e2453155058b1e21da125f9a1d1b7107d1cc6fc27bfe4bc4c6ce7_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1cb02a116a4e4ced10ce72ce7e33a8561bebbc3a193d9cfc9105ef02ae460486_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:3b26b0470955d4675172239466f4fb5c92a44b85eb830270bd8b7f6a1bb5b784_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:7ce60bc263471d3726dbbb6edfac0c2a4b58d23adb414f63f604440ba783fce5_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:fc9d7862ed6b0ce5ffe92cdaaee509b2ae161992b8f9bdfdb6865ccb04327d35_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:4a7c40e705dd0b17f4f91f29479b0818ed138e0442a65daa3292f5663dbfc52c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:694b88929ec77e63de90cd3dcb9f3e0899182f430c973d2b1367a2bec83e8b2f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acbe8a4b057e7e659e3d421634e9115b49a9a244e6c46a96e0f131a11cae167c_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acc41ca9440443de6018641e9d8c37a31fe32ab4e6747edd022cb8ed63d5bb0f_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0c38a05e03b0b4bcd6156c3c43667436cb2b31b41ea6c1a806ce062c4b051b1f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:1723204012943c8844d04645d564955d20cd22c720f06f33e7f86181454fea55_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:2dcc79c07726598b1c8a6b398d2da30503a3dae96e640963eb2b18a85a7dd7b2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8b784c0c62cbbc470c624f08b145a02a5054216398cf7d3554400a9ff926b7ed_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3e128932a688e7db59a8057bf9c2e84f01004143aaef5f8f8ee4cdfd33d90cfb_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3fa328a585adc80b2870d2841d3db177745c6b29605c69fb077f15cb49c63ba8_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:82ca34ecce0f6b9de413147167c5a2faec1f98b409c21a6fe7d00a56a1fef1f1_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f0d13754868e1f1d08523c2459e1f0a8b7c937e27da82b19b0f1ae73f989384d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:11f121479a915c5f59899f6e73afeeb299e3d6d0a1f091e7e87c51a373191093_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:25a5c98d72c1bdae4d2ecfef13433afe12897b2ec86f0609908fbf850700b884_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:2fc3444d7604901159a2f864dec6d59e3c2000bb7306c778591956c0a76b7ec5_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:bf49207dde3565ce593c0d276434c43e9fb9adcc950c3ccab53837e31ae27313_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a447e87fb55509fce9bfcf02b5571e87d9a002e331a20614bae17076ad544d3_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a7e5a72d2f82d60918e396a8cf3a973c479752de5e07bb8bd5bdbb9b1e1019c_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:51d2ba5a66f96afc8a61c6df1a147c67ca37a1aeeb9e0a40a9b3f8af56ea01e9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:7710bcfbeb5d4fe1dc98b9bb5cb3b99403fbcc2a680a159ba363530f48b8851d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:4f673d88ce055610c45123bef5c31446fdb8406d1d4969a643943f246e179c84_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:a3213419c43bfccc2fc55d9dd0115e464bd2fd8fb4e5a400cc3880f65198e9e3_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:c51e88125ea5402efd4d6d445089fe17d3e7c719d6cab72538eea0791dd2663a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:ed77f86958364fe53d8181e451581a77e242a4db791976fc7490cfcb454e589e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:8a6027f91f12a2ad6d50b64bf21fbf97a706be0fa3c05cce44df4bc1c6795462_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d313a31a1a0adde95eac4e0860b4a928a6c9c7bf00853214aa4b9c4a9be0365_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d0433de2bbd7bb21fdee82f3a0ac2f41c87675c8d525160f6697be4f52652cb6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:fcbe0ac15a63ac8b452b77c1900028e97b0237f946b3ecc9faf044168c5d7969_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:2df809162682b8c568979cce1bb298f116f4dc3673bb5f8af1fcbdca8e90ce79_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:64ffe5b3c536feb240530d14a507e9a99ec04b79f4035ade2714d5bca32cf77b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:65c3ca83edd90f463d03a1df2d375f95c1e4f39e2329d565b9ae8a462153e51e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:77c4c66043157fe503b63c347b0e67099b8e4948b8bb35dc46283aef6460c60e_ppc64le	—	Workaround

Threats

Impact Important

CVE-2026-19534

A flaw was found in undici. A remote attacker can exploit this vulnerability by responding with an unrequested WebSocket subprotocol during the opening handshake. This causes the undici WebSocket client to crash the entire Node.js process, leading to a denial of service (DoS).

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 16 products, the same list as for CVE-2026-13697

Known not affected 45 products, the same list as for CVE-2026-13697

Threats

Impact Important

CVE-2026-39820

A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-606 - Unchecked Input for Loop Condition

Affected products

Fixed 4 products, the same list as for CVE-2026-17106

Known not affected 57 products, the same list as for CVE-2026-17106

Threats

Impact Important

CVE-2026-41178

A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:4f673d88ce055610c45123bef5c31446fdb8406d1d4969a643943f246e179c84_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:a3213419c43bfccc2fc55d9dd0115e464bd2fd8fb4e5a400cc3880f65198e9e3_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:c51e88125ea5402efd4d6d445089fe17d3e7c719d6cab72538eea0791dd2663a_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:ed77f86958364fe53d8181e451581a77e242a4db791976fc7490cfcb454e589e_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:2df809162682b8c568979cce1bb298f116f4dc3673bb5f8af1fcbdca8e90ce79_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:64ffe5b3c536feb240530d14a507e9a99ec04b79f4035ade2714d5bca32cf77b_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:65c3ca83edd90f463d03a1df2d375f95c1e4f39e2329d565b9ae8a462153e51e_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:77c4c66043157fe503b63c347b0e67099b8e4948b8bb35dc46283aef6460c60e_ppc64le	—	Vendor Fix fix

Known not affected 53 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:3049a7248a4ad4d649b287aae877475deafeb7b6e1d0ecbec540f816e997b568_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:43a1bdbd4f337c81bc1a789c07d716e74a4a08f8e60374769ccd1bc202cef895_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:7e13f4dc4021d19696666d180d9d05ed4bad0ed1ae88e78562b5bbfad7adc314_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:f2c0813c6867724a82635c823a56077a8dd3b9322bcd6fcb0f4bf6dc05107a23_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:11c73dd00773e8df773a920d6b983649444630725b403720cc22f61dcbd9a88a_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:12ee43f548b9bbc51657e77500f399dfef7ef633b5e162007d627246a773981f_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:776d8fae8372638c1824a823eb5e5f9f76a1130493e979ffdeb0d5d1102b7542_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:956eeb6721b90d9024927c2afe185f9263329bd919a0ed9aa07d55d1b1deaab8_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:2e8188fdf97e15872ed626bd136071a20200791a879245ca911dcd1063b19732_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:5b0b6b676014f1c8d8ad5d6bc99aedadaf20b5846dc68c007026592541e9d29d_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:763324f7c02cc40a8217fc8daf103b5180d1be865fe8c366f877caae08ec0198_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:b72b4f747473061d4cea48ba76b318323e2d24714f020a6e7053ed641d864d76_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:01a0a766d5f13271a60cd6e2747760e4e9a741ef112fe5e9558fdc74ef2c5cff_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:169c11b438d9308b47b3ff9db32482b56581c725459393a04c3aeb2493743a8e_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:e054ba4dfbd318419796b9e604850ba3387b3485fa2e3d75e49d766e15574b42_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:fada2e23889911805c7122c6dc4571ecc4976b1a9250f2b300a532794e5499f9_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3ce6e51c799e2453155058b1e21da125f9a1d1b7107d1cc6fc27bfe4bc4c6ce7_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1cb02a116a4e4ced10ce72ce7e33a8561bebbc3a193d9cfc9105ef02ae460486_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:3b26b0470955d4675172239466f4fb5c92a44b85eb830270bd8b7f6a1bb5b784_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:7ce60bc263471d3726dbbb6edfac0c2a4b58d23adb414f63f604440ba783fce5_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:fc9d7862ed6b0ce5ffe92cdaaee509b2ae161992b8f9bdfdb6865ccb04327d35_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:4a7c40e705dd0b17f4f91f29479b0818ed138e0442a65daa3292f5663dbfc52c_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:694b88929ec77e63de90cd3dcb9f3e0899182f430c973d2b1367a2bec83e8b2f_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acbe8a4b057e7e659e3d421634e9115b49a9a244e6c46a96e0f131a11cae167c_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acc41ca9440443de6018641e9d8c37a31fe32ab4e6747edd022cb8ed63d5bb0f_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0c38a05e03b0b4bcd6156c3c43667436cb2b31b41ea6c1a806ce062c4b051b1f_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:1723204012943c8844d04645d564955d20cd22c720f06f33e7f86181454fea55_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:2dcc79c07726598b1c8a6b398d2da30503a3dae96e640963eb2b18a85a7dd7b2_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8b784c0c62cbbc470c624f08b145a02a5054216398cf7d3554400a9ff926b7ed_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3e128932a688e7db59a8057bf9c2e84f01004143aaef5f8f8ee4cdfd33d90cfb_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3fa328a585adc80b2870d2841d3db177745c6b29605c69fb077f15cb49c63ba8_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:82ca34ecce0f6b9de413147167c5a2faec1f98b409c21a6fe7d00a56a1fef1f1_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f0d13754868e1f1d08523c2459e1f0a8b7c937e27da82b19b0f1ae73f989384d_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:11f121479a915c5f59899f6e73afeeb299e3d6d0a1f091e7e87c51a373191093_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:25a5c98d72c1bdae4d2ecfef13433afe12897b2ec86f0609908fbf850700b884_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:2fc3444d7604901159a2f864dec6d59e3c2000bb7306c778591956c0a76b7ec5_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:bf49207dde3565ce593c0d276434c43e9fb9adcc950c3ccab53837e31ae27313_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:0a5e6487fec86246ba15b38a6a3651c5cd9316d25044a3c2bdf5572d1ce5a00b_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:5cbe66e31707a799600e2927d127666f1a1a9ac69e31da0efa4aed0191bacb06_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bd9a950cc2a62fab1ce027a744868213c0dac138d46c37daa099a87121b17163_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c73227f14687284ed632c12fdee7db809573bf029785a7a5622f60b38a52fd88_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:46fb8a7bcf2378cb7ed3f6d1d9a8fd126d0a6b5eea6aad190d533d292b6fa5a2_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:47078d49a8f53c974e220017c77c1421421d73611ecd92303105812659106737_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:536a091643cba26882ea90dfb58582a2ecf6424b4bf763da3a678ae2c586bd0f_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9f9f8ac5d0856e701c31912eaadba138b681a20f22d733254b82245ff7a8930c_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a447e87fb55509fce9bfcf02b5571e87d9a002e331a20614bae17076ad544d3_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a7e5a72d2f82d60918e396a8cf3a973c479752de5e07bb8bd5bdbb9b1e1019c_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:51d2ba5a66f96afc8a61c6df1a147c67ca37a1aeeb9e0a40a9b3f8af56ea01e9_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:7710bcfbeb5d4fe1dc98b9bb5cb3b99403fbcc2a680a159ba363530f48b8851d_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:8a6027f91f12a2ad6d50b64bf21fbf97a706be0fa3c05cce44df4bc1c6795462_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d313a31a1a0adde95eac4e0860b4a928a6c9c7bf00853214aa4b9c4a9be0365_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d0433de2bbd7bb21fdee82f3a0ac2f41c87675c8d525160f6697be4f52652cb6_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:fcbe0ac15a63ac8b452b77c1900028e97b0237f946b3ecc9faf044168c5d7969_s390x		—

Threats

Impact Important

CVE-2026-41707

A flaw was found in Spring Security's DPoPProofJwtDecoderFactory. This vulnerability allows a remote attacker to perform a replay attack by flooding the server with dummy requests, which evicts legitimate entries from an internal cache storing JSON Web Token (JWT) ID claims. Consequently, an attacker can replay intercepted valid DPoP proofs, potentially leading to unauthorized access or information disclosure.

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-294 - Authentication Bypass by Capture-replay

Affected products

Fixed 8 products, the same list as for CVE-2026-19203

Known not affected 53 products, the same list as for CVE-2026-19203

Threats

Impact Important

CVE-2026-42499

A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1046 - Creation of Immutable Text Using String Concatenation

Affected products

Fixed 4 products, the same list as for CVE-2026-17106

Known not affected 57 products, the same list as for CVE-2026-17106

Threats

Impact Important

CVE-2026-42502

A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user's web browser, potentially compromising user data or taking control of their session.

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 4 products, the same list as for CVE-2026-17106

Known not affected 57 products, the same list as for CVE-2026-17106

Threats

Impact Moderate

CVE-2026-45416

A flaw was found in Netty, a network application framework. A remote attacker can exploit this vulnerability by sending a crafted TLS (Transport Layer Security) ClientHello message. This can lead to an eager allocation of a large memory buffer, causing a Denial of Service (DoS) due to excessive memory consumption. The issue occurs in the `SslClientHelloHandler.decode()` method when processing the TLS handshake length.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products, the same list as for CVE-2026-12185

Known not affected 57 products, the same list as for CVE-2026-12185

Threats

Impact Important

CVE-2026-47884

A flaw was found in the XsltView component of Spring MVC applications. This vulnerability could allow a remote, unauthenticated attacker to perform Server-Side Request Forgery (SSRF), enabling them to make unauthorized requests from the server, and potentially achieve Remote Code Execution (RCE), allowing them to execute arbitrary code on the affected system. This occurs when an application uses a broad URL mapping that results in view rendering without explicitly specifying the view name, allowing an attacker to control which stylesheet is loaded.

9.8 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Fixed 8 products, the same list as for CVE-2026-19203

Known not affected 53 products, the same list as for CVE-2026-19203

Threats

Impact Critical

CVE-2026-47886

A flaw was found in Spring Framework. Applications that process user-supplied Spring Expression Language (SpEL) expressions are vulnerable to a Denial of Service (DoS) attack. This occurs when the power operator (^) is used with large numerical operands, leading to excessive resource consumption. A remote attacker could exploit this to make the application unresponsive.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 8 products, the same list as for CVE-2026-19203

Known not affected 53 products, the same list as for CVE-2026-19203

Threats

Impact Important

CVE-2026-47888

A flaw was found in Spring Framework, specifically within Spring RSocket applications. A remote attacker could exploit this vulnerability by sending a malformed SETUP frame to an affected application. This could lead to a memory leak, potentially causing a denial of service.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-401 - Missing Release of Memory after Effective Lifetime

Affected products

Fixed 8 products, the same list as for CVE-2026-19203

Known not affected 53 products, the same list as for CVE-2026-19203

Threats

Impact Important

CVE-2026-47890

A flaw was found in Spring Framework, affecting its MVC and WebFlux applications. When these applications use Server-Sent Events (SSE) with view fragments, a vulnerability allows for stream corruption. This can lead to unreliable data delivery and potential disruption of services.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

CWE-93 - Improper Neutralization of CRLF Sequences ('CRLF Injection')

Affected products

Fixed 8 products, the same list as for CVE-2026-19203

Known not affected 53 products, the same list as for CVE-2026-19203

Threats

Impact Moderate

CVE-2026-47892

A flaw was found in Spring Framework. This vulnerability allows a header predicate bypass to occur in a pre-flight request within a WebFlux application that uses functional endpoints and is deployed with DispatcherServlet. This bypass could potentially lead to unexpected behavior or security policy circumvention.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE-807 - Reliance on Untrusted Inputs in a Security Decision

Affected products

Fixed 8 products, the same list as for CVE-2026-19203

Known not affected 53 products, the same list as for CVE-2026-19203

Threats

Impact Moderate

CVE-2026-50010

A flaw was found in Netty, a network application framework. This vulnerability allows a remote attacker to bypass hostname verification due to improper handling of user-supplied trust managers. When a client is configured with a plain X.509 Trust Manager (X509TrustManager), it fails to perform necessary hostname checks, enabling an attacker to impersonate a legitimate server. This could lead to sensitive information disclosure or man-in-the-middle attacks.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-347 - Improper Verification of Cryptographic Signature

Affected products

Fixed 4 products, the same list as for CVE-2026-12185

Known not affected 57 products, the same list as for CVE-2026-12185

Threats

Impact Important

CVE-2026-55831

A flaw was found in Netty, a network application framework. A remote attacker, by sending a specially crafted SPDY/3.1 SETTINGS frame, could cause the SPDY SETTINGS decoder to create a large number of map entries. This excessive processing and memory allocation can lead to a denial of service (DoS) due to heap growth and increased CPU usage.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0c38a05e03b0b4bcd6156c3c43667436cb2b31b41ea6c1a806ce062c4b051b1f_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:1723204012943c8844d04645d564955d20cd22c720f06f33e7f86181454fea55_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:2dcc79c07726598b1c8a6b398d2da30503a3dae96e640963eb2b18a85a7dd7b2_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8b784c0c62cbbc470c624f08b145a02a5054216398cf7d3554400a9ff926b7ed_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3e128932a688e7db59a8057bf9c2e84f01004143aaef5f8f8ee4cdfd33d90cfb_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3fa328a585adc80b2870d2841d3db177745c6b29605c69fb077f15cb49c63ba8_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:82ca34ecce0f6b9de413147167c5a2faec1f98b409c21a6fe7d00a56a1fef1f1_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f0d13754868e1f1d08523c2459e1f0a8b7c937e27da82b19b0f1ae73f989384d_amd64	—	Vendor Fix fix Workaround

Known not affected 53 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:3049a7248a4ad4d649b287aae877475deafeb7b6e1d0ecbec540f816e997b568_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:43a1bdbd4f337c81bc1a789c07d716e74a4a08f8e60374769ccd1bc202cef895_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:7e13f4dc4021d19696666d180d9d05ed4bad0ed1ae88e78562b5bbfad7adc314_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:f2c0813c6867724a82635c823a56077a8dd3b9322bcd6fcb0f4bf6dc05107a23_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:11c73dd00773e8df773a920d6b983649444630725b403720cc22f61dcbd9a88a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:12ee43f548b9bbc51657e77500f399dfef7ef633b5e162007d627246a773981f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:776d8fae8372638c1824a823eb5e5f9f76a1130493e979ffdeb0d5d1102b7542_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:956eeb6721b90d9024927c2afe185f9263329bd919a0ed9aa07d55d1b1deaab8_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:2e8188fdf97e15872ed626bd136071a20200791a879245ca911dcd1063b19732_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:5b0b6b676014f1c8d8ad5d6bc99aedadaf20b5846dc68c007026592541e9d29d_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:763324f7c02cc40a8217fc8daf103b5180d1be865fe8c366f877caae08ec0198_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:b72b4f747473061d4cea48ba76b318323e2d24714f020a6e7053ed641d864d76_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:01a0a766d5f13271a60cd6e2747760e4e9a741ef112fe5e9558fdc74ef2c5cff_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:169c11b438d9308b47b3ff9db32482b56581c725459393a04c3aeb2493743a8e_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:e054ba4dfbd318419796b9e604850ba3387b3485fa2e3d75e49d766e15574b42_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:fada2e23889911805c7122c6dc4571ecc4976b1a9250f2b300a532794e5499f9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3ce6e51c799e2453155058b1e21da125f9a1d1b7107d1cc6fc27bfe4bc4c6ce7_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1cb02a116a4e4ced10ce72ce7e33a8561bebbc3a193d9cfc9105ef02ae460486_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:3b26b0470955d4675172239466f4fb5c92a44b85eb830270bd8b7f6a1bb5b784_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:7ce60bc263471d3726dbbb6edfac0c2a4b58d23adb414f63f604440ba783fce5_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:fc9d7862ed6b0ce5ffe92cdaaee509b2ae161992b8f9bdfdb6865ccb04327d35_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:4a7c40e705dd0b17f4f91f29479b0818ed138e0442a65daa3292f5663dbfc52c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:694b88929ec77e63de90cd3dcb9f3e0899182f430c973d2b1367a2bec83e8b2f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acbe8a4b057e7e659e3d421634e9115b49a9a244e6c46a96e0f131a11cae167c_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acc41ca9440443de6018641e9d8c37a31fe32ab4e6747edd022cb8ed63d5bb0f_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:11f121479a915c5f59899f6e73afeeb299e3d6d0a1f091e7e87c51a373191093_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:25a5c98d72c1bdae4d2ecfef13433afe12897b2ec86f0609908fbf850700b884_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:2fc3444d7604901159a2f864dec6d59e3c2000bb7306c778591956c0a76b7ec5_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:bf49207dde3565ce593c0d276434c43e9fb9adcc950c3ccab53837e31ae27313_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:0a5e6487fec86246ba15b38a6a3651c5cd9316d25044a3c2bdf5572d1ce5a00b_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:5cbe66e31707a799600e2927d127666f1a1a9ac69e31da0efa4aed0191bacb06_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bd9a950cc2a62fab1ce027a744868213c0dac138d46c37daa099a87121b17163_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c73227f14687284ed632c12fdee7db809573bf029785a7a5622f60b38a52fd88_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:46fb8a7bcf2378cb7ed3f6d1d9a8fd126d0a6b5eea6aad190d533d292b6fa5a2_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:47078d49a8f53c974e220017c77c1421421d73611ecd92303105812659106737_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:536a091643cba26882ea90dfb58582a2ecf6424b4bf763da3a678ae2c586bd0f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9f9f8ac5d0856e701c31912eaadba138b681a20f22d733254b82245ff7a8930c_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a447e87fb55509fce9bfcf02b5571e87d9a002e331a20614bae17076ad544d3_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a7e5a72d2f82d60918e396a8cf3a973c479752de5e07bb8bd5bdbb9b1e1019c_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:51d2ba5a66f96afc8a61c6df1a147c67ca37a1aeeb9e0a40a9b3f8af56ea01e9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:7710bcfbeb5d4fe1dc98b9bb5cb3b99403fbcc2a680a159ba363530f48b8851d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:4f673d88ce055610c45123bef5c31446fdb8406d1d4969a643943f246e179c84_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:a3213419c43bfccc2fc55d9dd0115e464bd2fd8fb4e5a400cc3880f65198e9e3_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:c51e88125ea5402efd4d6d445089fe17d3e7c719d6cab72538eea0791dd2663a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:ed77f86958364fe53d8181e451581a77e242a4db791976fc7490cfcb454e589e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:8a6027f91f12a2ad6d50b64bf21fbf97a706be0fa3c05cce44df4bc1c6795462_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d313a31a1a0adde95eac4e0860b4a928a6c9c7bf00853214aa4b9c4a9be0365_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d0433de2bbd7bb21fdee82f3a0ac2f41c87675c8d525160f6697be4f52652cb6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:fcbe0ac15a63ac8b452b77c1900028e97b0237f946b3ecc9faf044168c5d7969_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:2df809162682b8c568979cce1bb298f116f4dc3673bb5f8af1fcbdca8e90ce79_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:64ffe5b3c536feb240530d14a507e9a99ec04b79f4035ade2714d5bca32cf77b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:65c3ca83edd90f463d03a1df2d375f95c1e4f39e2329d565b9ae8a462153e51e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:77c4c66043157fe503b63c347b0e67099b8e4948b8bb35dc46283aef6460c60e_ppc64le	—	Workaround

Threats

Impact Important

CVE-2026-55833

A flaw was found in Netty, a network application framework. A remote attacker could exploit a vulnerability in the SPDY header decoding process. By sending a specially crafted, small compressed header block, the attacker can cause it to expand significantly during decompression, leading to excessive CPU usage and memory allocation. This can result in a denial of service (DoS) due to resource exhaustion.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-409 - Improper Handling of Highly Compressed Data (Data Amplification)

Affected products

Fixed 8 products, the same list as for CVE-2026-55831

Known not affected 53 products, the same list as for CVE-2026-55831

Threats

Impact Important

CVE-2026-55851

A flaw was found in Netty's codec-haproxy module. A remote attacker could exploit a vulnerability in the HAProxyMessageDecoder by sending a specially crafted PROXY protocol v2 message. This leads to unbounded buffer accumulation, causing a denial of service (DoS) due to memory exhaustion.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products, the same list as for CVE-2026-15076

Known not affected 57 products, the same list as for CVE-2026-15076

Threats

Impact Important

CVE-2026-56745

A flaw was found in Netty. A remote attacker can exploit a vulnerability in the `SpdyHttpDecoder` handler of Netty's SPDY-to-HTTP codec. When processing a client-initiated `SYN_STREAM` frame, the decoder fails to release allocated memory if the stream is reset or content limits are exceeded. This oversight leads to native memory exhaustion, which can result in a Denial of Service (DoS) for the affected system.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-772 - Missing Release of Resource after Effective Lifetime

Affected products

Fixed 8 products, the same list as for CVE-2026-55831

Known not affected 53 products, the same list as for CVE-2026-55831

Threats

Impact Important

CVE-2026-56746

A flaw was found in Netty, a network application framework. A remote attacker can bypass security controls in the `CorsHandler` component by sending a specially crafted request with a null origin header. This bypasses the intended access restrictions, allowing unauthorized requests to reach the backend application. This could lead to a compromise of data integrity by allowing unauthorized actions.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-807 - Reliance on Untrusted Inputs in a Security Decision

Affected products

Fixed 8 products, the same list as for CVE-2026-55831

Known not affected 53 products, the same list as for CVE-2026-55831

Threats

Impact Important

CVE-2026-56819

A flaw was found in Netty, a network application framework. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted HTTP/2 DATA frames to applications that use Netty and have HTTP/2 content decompression enabled. This can lead to memory exhaustion, causing the application to crash and resulting in a Denial of Service (DoS). The issue occurs because the framework fails to release retained memory buffers when processing DATA frames for a stream whose decompressor has already been closed.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-911 - Improper Update of Reference Count

Affected products

Fixed 8 products, the same list as for CVE-2026-55831

Known not affected 53 products, the same list as for CVE-2026-55831

Threats

Impact Important

CVE-2026-56852

A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 4 products, the same list as for CVE-2026-8643

Known not affected 57 products, the same list as for CVE-2026-8643

Threats

Impact Important

CVE-2026-56854

A flaw was found in golang.org/x/crypto/ssh. The component failed to properly enforce source-address restrictions for several authentication methods, including password and keyboard-interactive callbacks. In applications that misuse the ServerConfig.PublicKeyCallback callback to make security relevant authorization decisions, an attacker with a valid key could bypass network-based access controls to gain additional privileges.

6.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

CWE-346 - Origin Validation Error

Affected products

Fixed 4 products, the same list as for CVE-2026-17106

Known not affected 57 products, the same list as for CVE-2026-17106

Threats

Impact Important

CVE-2026-58062

A flaw was found in Bouncy Castle for Java. A remote attacker could exploit this by presenting a stapled Online Certificate Status Protocol (OCSP) response that is not properly bound to the certificate being checked. This vulnerability allows for a certificate validation bypass, potentially leading to applications accepting invalid or revoked certificates. This could enable man-in-the-middle attacks or unauthorized access.

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-295 - Improper Certificate Validation

Affected products

Fixed 12 products, the same list as for CVE-2026-14682

Known not affected 49 products, the same list as for CVE-2026-14682

Threats

Impact Important

CVE-2026-59280

A flaw was found in Spring Framework. Applications using its FreeMarker integration may be vulnerable to a path traversal attack. A remote attacker could exploit this by providing untrusted input to a controller that returns a view name, allowing unauthorized access to files or directories when FreeMarker is configured to resolve templates through SpringTemplateLoader.

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Fixed 8 products, the same list as for CVE-2026-19203

Known not affected 53 products, the same list as for CVE-2026-19203

Threats

Impact Moderate

CVE-2026-59282

A flaw was found in Spring Framework. Applications utilizing Spring's data binding infrastructure to apply user-supplied property paths onto a target object are susceptible to a Denial of Service (DoS) attack. A remote attacker could exploit this by providing specially crafted input, leading to unbounded list growth and resource exhaustion. This can make the application unresponsive or crash it, preventing legitimate users from accessing the service.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 8 products, the same list as for CVE-2026-19203

Known not affected 53 products, the same list as for CVE-2026-19203

Threats

Impact Important

CVE-2026-59283

A flaw was found in Spring Framework. Applications that evaluate Spring Expression Language (SpEL) expressions using SimpleEvaluationContext may be vulnerable to a safety guard bypass when the SpEL expression compiler is active. This could allow an attacker to circumvent security restrictions, potentially leading to unauthorized actions within the application.

9.8 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-917 - Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')

Affected products

Fixed 8 products, the same list as for CVE-2026-19203

Known not affected 53 products, the same list as for CVE-2026-19203

Threats

Impact Critical

CVE-2026-59296

A flaw was found in Micrometer's StatsD and Logging meter registries. This vulnerability allows a remote attacker to inject line terminators into metric data, such as names or tag values, due to insufficient sanitization of untrusted input. Exploitation can lead to the spoofing of arbitrary metrics, including critical system or business metrics, and the injection of false log entries, potentially impacting monitoring and auditing systems.

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-93 - Improper Neutralization of CRLF Sequences ('CRLF Injection')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a447e87fb55509fce9bfcf02b5571e87d9a002e331a20614bae17076ad544d3_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a7e5a72d2f82d60918e396a8cf3a973c479752de5e07bb8bd5bdbb9b1e1019c_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:51d2ba5a66f96afc8a61c6df1a147c67ca37a1aeeb9e0a40a9b3f8af56ea01e9_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:7710bcfbeb5d4fe1dc98b9bb5cb3b99403fbcc2a680a159ba363530f48b8851d_s390x	—	Vendor Fix fix Workaround

Known not affected 57 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:3049a7248a4ad4d649b287aae877475deafeb7b6e1d0ecbec540f816e997b568_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:43a1bdbd4f337c81bc1a789c07d716e74a4a08f8e60374769ccd1bc202cef895_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:7e13f4dc4021d19696666d180d9d05ed4bad0ed1ae88e78562b5bbfad7adc314_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:f2c0813c6867724a82635c823a56077a8dd3b9322bcd6fcb0f4bf6dc05107a23_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:11c73dd00773e8df773a920d6b983649444630725b403720cc22f61dcbd9a88a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:12ee43f548b9bbc51657e77500f399dfef7ef633b5e162007d627246a773981f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:776d8fae8372638c1824a823eb5e5f9f76a1130493e979ffdeb0d5d1102b7542_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:956eeb6721b90d9024927c2afe185f9263329bd919a0ed9aa07d55d1b1deaab8_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:2e8188fdf97e15872ed626bd136071a20200791a879245ca911dcd1063b19732_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:5b0b6b676014f1c8d8ad5d6bc99aedadaf20b5846dc68c007026592541e9d29d_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:763324f7c02cc40a8217fc8daf103b5180d1be865fe8c366f877caae08ec0198_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:b72b4f747473061d4cea48ba76b318323e2d24714f020a6e7053ed641d864d76_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:01a0a766d5f13271a60cd6e2747760e4e9a741ef112fe5e9558fdc74ef2c5cff_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:169c11b438d9308b47b3ff9db32482b56581c725459393a04c3aeb2493743a8e_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:e054ba4dfbd318419796b9e604850ba3387b3485fa2e3d75e49d766e15574b42_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:fada2e23889911805c7122c6dc4571ecc4976b1a9250f2b300a532794e5499f9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3ce6e51c799e2453155058b1e21da125f9a1d1b7107d1cc6fc27bfe4bc4c6ce7_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1cb02a116a4e4ced10ce72ce7e33a8561bebbc3a193d9cfc9105ef02ae460486_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:3b26b0470955d4675172239466f4fb5c92a44b85eb830270bd8b7f6a1bb5b784_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:7ce60bc263471d3726dbbb6edfac0c2a4b58d23adb414f63f604440ba783fce5_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:fc9d7862ed6b0ce5ffe92cdaaee509b2ae161992b8f9bdfdb6865ccb04327d35_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:4a7c40e705dd0b17f4f91f29479b0818ed138e0442a65daa3292f5663dbfc52c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:694b88929ec77e63de90cd3dcb9f3e0899182f430c973d2b1367a2bec83e8b2f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acbe8a4b057e7e659e3d421634e9115b49a9a244e6c46a96e0f131a11cae167c_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acc41ca9440443de6018641e9d8c37a31fe32ab4e6747edd022cb8ed63d5bb0f_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0c38a05e03b0b4bcd6156c3c43667436cb2b31b41ea6c1a806ce062c4b051b1f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:1723204012943c8844d04645d564955d20cd22c720f06f33e7f86181454fea55_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:2dcc79c07726598b1c8a6b398d2da30503a3dae96e640963eb2b18a85a7dd7b2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8b784c0c62cbbc470c624f08b145a02a5054216398cf7d3554400a9ff926b7ed_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3e128932a688e7db59a8057bf9c2e84f01004143aaef5f8f8ee4cdfd33d90cfb_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3fa328a585adc80b2870d2841d3db177745c6b29605c69fb077f15cb49c63ba8_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:82ca34ecce0f6b9de413147167c5a2faec1f98b409c21a6fe7d00a56a1fef1f1_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f0d13754868e1f1d08523c2459e1f0a8b7c937e27da82b19b0f1ae73f989384d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:11f121479a915c5f59899f6e73afeeb299e3d6d0a1f091e7e87c51a373191093_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:25a5c98d72c1bdae4d2ecfef13433afe12897b2ec86f0609908fbf850700b884_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:2fc3444d7604901159a2f864dec6d59e3c2000bb7306c778591956c0a76b7ec5_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:bf49207dde3565ce593c0d276434c43e9fb9adcc950c3ccab53837e31ae27313_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:0a5e6487fec86246ba15b38a6a3651c5cd9316d25044a3c2bdf5572d1ce5a00b_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:5cbe66e31707a799600e2927d127666f1a1a9ac69e31da0efa4aed0191bacb06_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bd9a950cc2a62fab1ce027a744868213c0dac138d46c37daa099a87121b17163_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c73227f14687284ed632c12fdee7db809573bf029785a7a5622f60b38a52fd88_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:46fb8a7bcf2378cb7ed3f6d1d9a8fd126d0a6b5eea6aad190d533d292b6fa5a2_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:47078d49a8f53c974e220017c77c1421421d73611ecd92303105812659106737_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:536a091643cba26882ea90dfb58582a2ecf6424b4bf763da3a678ae2c586bd0f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9f9f8ac5d0856e701c31912eaadba138b681a20f22d733254b82245ff7a8930c_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:4f673d88ce055610c45123bef5c31446fdb8406d1d4969a643943f246e179c84_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:a3213419c43bfccc2fc55d9dd0115e464bd2fd8fb4e5a400cc3880f65198e9e3_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:c51e88125ea5402efd4d6d445089fe17d3e7c719d6cab72538eea0791dd2663a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:ed77f86958364fe53d8181e451581a77e242a4db791976fc7490cfcb454e589e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:8a6027f91f12a2ad6d50b64bf21fbf97a706be0fa3c05cce44df4bc1c6795462_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d313a31a1a0adde95eac4e0860b4a928a6c9c7bf00853214aa4b9c4a9be0365_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d0433de2bbd7bb21fdee82f3a0ac2f41c87675c8d525160f6697be4f52652cb6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:fcbe0ac15a63ac8b452b77c1900028e97b0237f946b3ecc9faf044168c5d7969_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:2df809162682b8c568979cce1bb298f116f4dc3673bb5f8af1fcbdca8e90ce79_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:64ffe5b3c536feb240530d14a507e9a99ec04b79f4035ade2714d5bca32cf77b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:65c3ca83edd90f463d03a1df2d375f95c1e4f39e2329d565b9ae8a462153e51e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:77c4c66043157fe503b63c347b0e67099b8e4948b8bb35dc46283aef6460c60e_ppc64le	—	Workaround

Threats

Impact Moderate

CVE-2026-59313

A flaw was found in the Spring MVC functional web framework. This vulnerability allows for stream corruption when applications use Server-Sent Events (SSE), a technology for pushing real-time updates from a server to a client. This could lead to unreliable data delivery and impact the integrity of information presented to users.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

CWE-924 - Improper Enforcement of Message Integrity During Transmission in a Communication Channel

Affected products

Fixed 8 products, the same list as for CVE-2026-19203

Known not affected 53 products, the same list as for CVE-2026-19203

Threats

Impact Moderate

CVE-2026-59323

A flaw was found in Micrometer Tracing's Brave bridge when using W3C baggage propagation. A remote attacker can exploit this by sending specially crafted requests with excessively large baggage headers. This can lead to unbounded memory allocation, causing high CPU usage, increased garbage collection, and potentially crashing the application, resulting in a denial of service. This vulnerability occurs when an application processes untrusted input with baggage headers and network components do not adequately limit header sizes.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 8 products, the same list as for CVE-2026-19203

Known not affected 53 products, the same list as for CVE-2026-19203

Threats

Impact Important

CVE-2026-59651

A flaw was found in Bouncy Castle for Java. The BKS keystore, which is used for storing cryptographic keys, accepts legacy versions that utilize a 16-bit integrity Message Authentication Code (MAC) key. This weak integrity protection could allow an attacker to tamper with the keystore's contents without being detected, leading to a high integrity impact.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-1240 - Use of a Cryptographic Primitive with a Risky Implementation

Affected products

Fixed 12 products, the same list as for CVE-2026-14682

Known not affected 49 products, the same list as for CVE-2026-14682

Threats

Impact Important

CVE-2026-59887

A flaw was found in linkify-it, a library for recognizing links. A remote attacker could exploit this vulnerability by providing specially crafted user text. The mailto: schema validator, when processing this input, can be repeatedly invoked, leading to excessive CPU consumption. This can result in a Denial of Service (DoS) for the affected system.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1333 - Inefficient Regular Expression Complexity

Affected products

Fixed 4 products, the same list as for CVE-2023-54404

Known not affected 57 products, the same list as for CVE-2023-54404

Threats

Impact Important

CVE-2026-59899

A flaw was found in the Netty netty-codec-http component. A remote attacker can send HTTP requests containing highly compressed data. The HTTP decoder in netty-codec-http fails to properly limit the decompression of this content, causing the system to consume excessive memory. This can lead to memory exhaustion and a denial of service (DoS), making the service unavailable to legitimate users.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-409 - Improper Handling of Highly Compressed Data (Data Amplification)

Affected products

Fixed 8 products, the same list as for CVE-2026-55831

Known not affected 53 products, the same list as for CVE-2026-55831

Threats

Impact Important

CVE-2026-59901

A flaw was found in the netty-codec-compression component of Netty. This vulnerability, caused by a logic error in the bzip2 decoder, allows a remote attacker to send specially crafted bzip2-compressed data. Processing this malformed data can trigger an infinite loop, causing the decoder thread to consume excessive CPU resources. This leads to a denial of service (DoS), requiring manual intervention to restore service.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 4 products, the same list as for CVE-2026-15076

Known not affected 57 products, the same list as for CVE-2026-15076

Threats

Impact Moderate

CVE-2026-62243

A flaw was found in Netty (io.netty:netty-handler). When using the SslProvider.OPENSSL client path with a plain X509TrustManager and without Unsafe-based trust-manager wrapping (Java 25+), TLS hostname verification is disabled. This misconfiguration allows a man-in-the-middle attacker to present a fraudulent certificate for a different hostname, which is then accepted without proper validation. This could lead to sensitive information disclosure.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-295 - Improper Certificate Validation

Affected products

Fixed 20 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0c38a05e03b0b4bcd6156c3c43667436cb2b31b41ea6c1a806ce062c4b051b1f_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:1723204012943c8844d04645d564955d20cd22c720f06f33e7f86181454fea55_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:2dcc79c07726598b1c8a6b398d2da30503a3dae96e640963eb2b18a85a7dd7b2_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8b784c0c62cbbc470c624f08b145a02a5054216398cf7d3554400a9ff926b7ed_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3e128932a688e7db59a8057bf9c2e84f01004143aaef5f8f8ee4cdfd33d90cfb_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3fa328a585adc80b2870d2841d3db177745c6b29605c69fb077f15cb49c63ba8_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:82ca34ecce0f6b9de413147167c5a2faec1f98b409c21a6fe7d00a56a1fef1f1_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f0d13754868e1f1d08523c2459e1f0a8b7c937e27da82b19b0f1ae73f989384d_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:0a5e6487fec86246ba15b38a6a3651c5cd9316d25044a3c2bdf5572d1ce5a00b_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:5cbe66e31707a799600e2927d127666f1a1a9ac69e31da0efa4aed0191bacb06_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bd9a950cc2a62fab1ce027a744868213c0dac138d46c37daa099a87121b17163_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c73227f14687284ed632c12fdee7db809573bf029785a7a5622f60b38a52fd88_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:46fb8a7bcf2378cb7ed3f6d1d9a8fd126d0a6b5eea6aad190d533d292b6fa5a2_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:47078d49a8f53c974e220017c77c1421421d73611ecd92303105812659106737_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:536a091643cba26882ea90dfb58582a2ecf6424b4bf763da3a678ae2c586bd0f_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9f9f8ac5d0856e701c31912eaadba138b681a20f22d733254b82245ff7a8930c_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a447e87fb55509fce9bfcf02b5571e87d9a002e331a20614bae17076ad544d3_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a7e5a72d2f82d60918e396a8cf3a973c479752de5e07bb8bd5bdbb9b1e1019c_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:51d2ba5a66f96afc8a61c6df1a147c67ca37a1aeeb9e0a40a9b3f8af56ea01e9_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:7710bcfbeb5d4fe1dc98b9bb5cb3b99403fbcc2a680a159ba363530f48b8851d_s390x	—	Vendor Fix fix Workaround

Known not affected 41 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:3049a7248a4ad4d649b287aae877475deafeb7b6e1d0ecbec540f816e997b568_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:43a1bdbd4f337c81bc1a789c07d716e74a4a08f8e60374769ccd1bc202cef895_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:7e13f4dc4021d19696666d180d9d05ed4bad0ed1ae88e78562b5bbfad7adc314_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:f2c0813c6867724a82635c823a56077a8dd3b9322bcd6fcb0f4bf6dc05107a23_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:11c73dd00773e8df773a920d6b983649444630725b403720cc22f61dcbd9a88a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:12ee43f548b9bbc51657e77500f399dfef7ef633b5e162007d627246a773981f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:776d8fae8372638c1824a823eb5e5f9f76a1130493e979ffdeb0d5d1102b7542_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:956eeb6721b90d9024927c2afe185f9263329bd919a0ed9aa07d55d1b1deaab8_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:2e8188fdf97e15872ed626bd136071a20200791a879245ca911dcd1063b19732_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:5b0b6b676014f1c8d8ad5d6bc99aedadaf20b5846dc68c007026592541e9d29d_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:763324f7c02cc40a8217fc8daf103b5180d1be865fe8c366f877caae08ec0198_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:b72b4f747473061d4cea48ba76b318323e2d24714f020a6e7053ed641d864d76_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:01a0a766d5f13271a60cd6e2747760e4e9a741ef112fe5e9558fdc74ef2c5cff_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:169c11b438d9308b47b3ff9db32482b56581c725459393a04c3aeb2493743a8e_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:e054ba4dfbd318419796b9e604850ba3387b3485fa2e3d75e49d766e15574b42_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:fada2e23889911805c7122c6dc4571ecc4976b1a9250f2b300a532794e5499f9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3ce6e51c799e2453155058b1e21da125f9a1d1b7107d1cc6fc27bfe4bc4c6ce7_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1cb02a116a4e4ced10ce72ce7e33a8561bebbc3a193d9cfc9105ef02ae460486_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:3b26b0470955d4675172239466f4fb5c92a44b85eb830270bd8b7f6a1bb5b784_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:7ce60bc263471d3726dbbb6edfac0c2a4b58d23adb414f63f604440ba783fce5_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:fc9d7862ed6b0ce5ffe92cdaaee509b2ae161992b8f9bdfdb6865ccb04327d35_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:4a7c40e705dd0b17f4f91f29479b0818ed138e0442a65daa3292f5663dbfc52c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:694b88929ec77e63de90cd3dcb9f3e0899182f430c973d2b1367a2bec83e8b2f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acbe8a4b057e7e659e3d421634e9115b49a9a244e6c46a96e0f131a11cae167c_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acc41ca9440443de6018641e9d8c37a31fe32ab4e6747edd022cb8ed63d5bb0f_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:11f121479a915c5f59899f6e73afeeb299e3d6d0a1f091e7e87c51a373191093_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:25a5c98d72c1bdae4d2ecfef13433afe12897b2ec86f0609908fbf850700b884_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:2fc3444d7604901159a2f864dec6d59e3c2000bb7306c778591956c0a76b7ec5_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:bf49207dde3565ce593c0d276434c43e9fb9adcc950c3ccab53837e31ae27313_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:4f673d88ce055610c45123bef5c31446fdb8406d1d4969a643943f246e179c84_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:a3213419c43bfccc2fc55d9dd0115e464bd2fd8fb4e5a400cc3880f65198e9e3_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:c51e88125ea5402efd4d6d445089fe17d3e7c719d6cab72538eea0791dd2663a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:ed77f86958364fe53d8181e451581a77e242a4db791976fc7490cfcb454e589e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:8a6027f91f12a2ad6d50b64bf21fbf97a706be0fa3c05cce44df4bc1c6795462_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d313a31a1a0adde95eac4e0860b4a928a6c9c7bf00853214aa4b9c4a9be0365_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d0433de2bbd7bb21fdee82f3a0ac2f41c87675c8d525160f6697be4f52652cb6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:fcbe0ac15a63ac8b452b77c1900028e97b0237f946b3ecc9faf044168c5d7969_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:2df809162682b8c568979cce1bb298f116f4dc3673bb5f8af1fcbdca8e90ce79_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:64ffe5b3c536feb240530d14a507e9a99ec04b79f4035ade2714d5bca32cf77b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:65c3ca83edd90f463d03a1df2d375f95c1e4f39e2329d565b9ae8a462153e51e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:77c4c66043157fe503b63c347b0e67099b8e4948b8bb35dc46283aef6460c60e_ppc64le	—	Workaround

Threats

Impact Important

CVE-2026-64607

A flaw was found in Apache HttpComponents Client, specifically in its classic input/output (I/O) model. When processing a response message with an invalid or unsupported `Content-Encoding` header, the client fails to properly release the underlying network connection. This connection leak can lead to the exhaustion of the connection pool, making the service unavailable and resulting in a Denial of Service (DoS) for legitimate users.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-772 - Missing Release of Resource after Effective Lifetime

Affected products

Fixed 8 products, the same list as for CVE-2026-19203

Known not affected 53 products, the same list as for CVE-2026-19203

Threats

Impact Important

CVE-2026-67213

A flaw was found in nanoid (Nano ID), a small, secure, and URL-friendly unique string ID generator. An attacker could exploit this vulnerability by providing a zero-size input to the customAlphabet or customRandom functions. This would cause an infinite loop, leading to a denial of service (DoS) condition by hanging the application's calling thread.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:0a5e6487fec86246ba15b38a6a3651c5cd9316d25044a3c2bdf5572d1ce5a00b_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:5cbe66e31707a799600e2927d127666f1a1a9ac69e31da0efa4aed0191bacb06_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bd9a950cc2a62fab1ce027a744868213c0dac138d46c37daa099a87121b17163_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c73227f14687284ed632c12fdee7db809573bf029785a7a5622f60b38a52fd88_amd64	—	Vendor Fix fix Workaround

Known not affected 57 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:3049a7248a4ad4d649b287aae877475deafeb7b6e1d0ecbec540f816e997b568_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:43a1bdbd4f337c81bc1a789c07d716e74a4a08f8e60374769ccd1bc202cef895_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:7e13f4dc4021d19696666d180d9d05ed4bad0ed1ae88e78562b5bbfad7adc314_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:f2c0813c6867724a82635c823a56077a8dd3b9322bcd6fcb0f4bf6dc05107a23_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:11c73dd00773e8df773a920d6b983649444630725b403720cc22f61dcbd9a88a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:12ee43f548b9bbc51657e77500f399dfef7ef633b5e162007d627246a773981f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:776d8fae8372638c1824a823eb5e5f9f76a1130493e979ffdeb0d5d1102b7542_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:956eeb6721b90d9024927c2afe185f9263329bd919a0ed9aa07d55d1b1deaab8_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:2e8188fdf97e15872ed626bd136071a20200791a879245ca911dcd1063b19732_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:5b0b6b676014f1c8d8ad5d6bc99aedadaf20b5846dc68c007026592541e9d29d_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:763324f7c02cc40a8217fc8daf103b5180d1be865fe8c366f877caae08ec0198_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:b72b4f747473061d4cea48ba76b318323e2d24714f020a6e7053ed641d864d76_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:01a0a766d5f13271a60cd6e2747760e4e9a741ef112fe5e9558fdc74ef2c5cff_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:169c11b438d9308b47b3ff9db32482b56581c725459393a04c3aeb2493743a8e_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:e054ba4dfbd318419796b9e604850ba3387b3485fa2e3d75e49d766e15574b42_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:fada2e23889911805c7122c6dc4571ecc4976b1a9250f2b300a532794e5499f9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3ce6e51c799e2453155058b1e21da125f9a1d1b7107d1cc6fc27bfe4bc4c6ce7_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1cb02a116a4e4ced10ce72ce7e33a8561bebbc3a193d9cfc9105ef02ae460486_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:3b26b0470955d4675172239466f4fb5c92a44b85eb830270bd8b7f6a1bb5b784_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:7ce60bc263471d3726dbbb6edfac0c2a4b58d23adb414f63f604440ba783fce5_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:fc9d7862ed6b0ce5ffe92cdaaee509b2ae161992b8f9bdfdb6865ccb04327d35_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:4a7c40e705dd0b17f4f91f29479b0818ed138e0442a65daa3292f5663dbfc52c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:694b88929ec77e63de90cd3dcb9f3e0899182f430c973d2b1367a2bec83e8b2f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acbe8a4b057e7e659e3d421634e9115b49a9a244e6c46a96e0f131a11cae167c_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acc41ca9440443de6018641e9d8c37a31fe32ab4e6747edd022cb8ed63d5bb0f_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0c38a05e03b0b4bcd6156c3c43667436cb2b31b41ea6c1a806ce062c4b051b1f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:1723204012943c8844d04645d564955d20cd22c720f06f33e7f86181454fea55_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:2dcc79c07726598b1c8a6b398d2da30503a3dae96e640963eb2b18a85a7dd7b2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8b784c0c62cbbc470c624f08b145a02a5054216398cf7d3554400a9ff926b7ed_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3e128932a688e7db59a8057bf9c2e84f01004143aaef5f8f8ee4cdfd33d90cfb_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3fa328a585adc80b2870d2841d3db177745c6b29605c69fb077f15cb49c63ba8_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:82ca34ecce0f6b9de413147167c5a2faec1f98b409c21a6fe7d00a56a1fef1f1_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f0d13754868e1f1d08523c2459e1f0a8b7c937e27da82b19b0f1ae73f989384d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:11f121479a915c5f59899f6e73afeeb299e3d6d0a1f091e7e87c51a373191093_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:25a5c98d72c1bdae4d2ecfef13433afe12897b2ec86f0609908fbf850700b884_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:2fc3444d7604901159a2f864dec6d59e3c2000bb7306c778591956c0a76b7ec5_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:bf49207dde3565ce593c0d276434c43e9fb9adcc950c3ccab53837e31ae27313_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:46fb8a7bcf2378cb7ed3f6d1d9a8fd126d0a6b5eea6aad190d533d292b6fa5a2_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:47078d49a8f53c974e220017c77c1421421d73611ecd92303105812659106737_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:536a091643cba26882ea90dfb58582a2ecf6424b4bf763da3a678ae2c586bd0f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9f9f8ac5d0856e701c31912eaadba138b681a20f22d733254b82245ff7a8930c_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a447e87fb55509fce9bfcf02b5571e87d9a002e331a20614bae17076ad544d3_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a7e5a72d2f82d60918e396a8cf3a973c479752de5e07bb8bd5bdbb9b1e1019c_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:51d2ba5a66f96afc8a61c6df1a147c67ca37a1aeeb9e0a40a9b3f8af56ea01e9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:7710bcfbeb5d4fe1dc98b9bb5cb3b99403fbcc2a680a159ba363530f48b8851d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:4f673d88ce055610c45123bef5c31446fdb8406d1d4969a643943f246e179c84_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:a3213419c43bfccc2fc55d9dd0115e464bd2fd8fb4e5a400cc3880f65198e9e3_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:c51e88125ea5402efd4d6d445089fe17d3e7c719d6cab72538eea0791dd2663a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:ed77f86958364fe53d8181e451581a77e242a4db791976fc7490cfcb454e589e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:8a6027f91f12a2ad6d50b64bf21fbf97a706be0fa3c05cce44df4bc1c6795462_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d313a31a1a0adde95eac4e0860b4a928a6c9c7bf00853214aa4b9c4a9be0365_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d0433de2bbd7bb21fdee82f3a0ac2f41c87675c8d525160f6697be4f52652cb6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:fcbe0ac15a63ac8b452b77c1900028e97b0237f946b3ecc9faf044168c5d7969_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:2df809162682b8c568979cce1bb298f116f4dc3673bb5f8af1fcbdca8e90ce79_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:64ffe5b3c536feb240530d14a507e9a99ec04b79f4035ade2714d5bca32cf77b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:65c3ca83edd90f463d03a1df2d375f95c1e4f39e2329d565b9ae8a462153e51e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:77c4c66043157fe503b63c347b0e67099b8e4948b8bb35dc46283aef6460c60e_ppc64le	—	Workaround

Threats

Impact Important

CVE-2026-67312

A flaw was found in axios, a popular JavaScript library. An attacker can exploit this vulnerability by providing malicious form data containing deeply nested field names. This input triggers uncontrolled recursion within the formDataToJSON function, which is responsible for processing form data. The excessive recursion exhausts the application's JavaScript call stack, leading to a denial of service for the affected request or, in some cases, causing the entire application process to terminate.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-674 - Uncontrolled Recursion

Affected products

Fixed 4 products, the same list as for CVE-2023-54404

Known not affected 57 products, the same list as for CVE-2023-54404

Threats

Impact Important

CVE-2026-67313

A flaw was found in axios. A remote attacker could exploit an uncontrolled recursion vulnerability in the formDataToJSON function by supplying FormData with field names containing deeply nested bracket segments. This could exhaust the JavaScript call stack, leading to a RangeError and causing a denial of service (DoS) through request failure or process termination in affected applications.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 4 products, the same list as for CVE-2023-54404

Known not affected 57 products, the same list as for CVE-2023-54404

Threats

Impact Important

CVE-2026-67314

A flaw was found in axios. This vulnerability involves prototype pollution read-side gadgets within the basic authentication subfield handling. If an application is already susceptible to a separate prototype pollution issue and makes an axios request without specifying username or password in its authentication object, an attacker can inject malicious values. This allows for outbound request tampering, enabling the attacker to inject or replace basic authentication credentials in outgoing requests. Under specific application conditions, this could also lead to credential disclosure.

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes

Affected products

Fixed 4 products, the same list as for CVE-2023-54404

Known not affected 57 products, the same list as for CVE-2023-54404

Threats

Impact Important

CVE-2026-67320

A flaw was found in axios when used in a Node.js deployment with the HTTP adapter. This vulnerability, known as Prototype Pollution, occurs because request interceptors can revert hardened request configurations, allowing an attacker to manipulate the Object.prototype.proxy property. If successfully exploited, an attacker can route affected plaintext HTTP requests through a malicious proxy, potentially observing sensitive data such as authentication headers and request bodies, and even returning their own responses.

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes

Affected products

Fixed 4 products, the same list as for CVE-2023-54404

Known not affected 57 products, the same list as for CVE-2023-54404

Threats

Impact Important

CVE-2026-67321

A flaw was found in axios. A remote attacker could exploit an incomplete depth-limit bypass when the component serializes objects with specific top-level keys. By manipulating object keys and nested values during form or parameter serialization, an attacker can trigger a processing error. This can lead to a denial of service, making the affected request path unavailable to legitimate users.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products, the same list as for CVE-2023-54404

Known not affected 57 products, the same list as for CVE-2023-54404

Threats

Impact Important

CVE-2026-68494

A flaw was found in jackson-core. A remote attacker can exploit an incomplete fix in the non-blocking JSON parser by streaming specially crafted JSON data in small chunks. This bypasses the intended number length constraint, causing the parser to accumulate excessive memory per connection. This uncontrolled memory growth can lead to a denial of service (DoS) by exhausting the Java Virtual Machine (JVM) heap.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products, the same list as for CVE-2026-15076

Known not affected 57 products, the same list as for CVE-2026-15076

Threats

Impact Important

CVE-2026-68497

A flaw was found in jackson-databind. An unauthenticated attacker can trigger a denial of service (DoS) by exploiting an unbounded numeric parse vulnerability. This occurs during the deserialization of `javax.xml.datatype.Duration` or `javax.xml.datatype.XMLGregorianCalendar` fields from JSON strings, where the system processes arbitrarily long numeric components. This can lead to high CPU utilization, potentially saturating server worker threads and making the service unavailable.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 12 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3e128932a688e7db59a8057bf9c2e84f01004143aaef5f8f8ee4cdfd33d90cfb_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3fa328a585adc80b2870d2841d3db177745c6b29605c69fb077f15cb49c63ba8_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:82ca34ecce0f6b9de413147167c5a2faec1f98b409c21a6fe7d00a56a1fef1f1_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f0d13754868e1f1d08523c2459e1f0a8b7c937e27da82b19b0f1ae73f989384d_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:0a5e6487fec86246ba15b38a6a3651c5cd9316d25044a3c2bdf5572d1ce5a00b_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:5cbe66e31707a799600e2927d127666f1a1a9ac69e31da0efa4aed0191bacb06_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bd9a950cc2a62fab1ce027a744868213c0dac138d46c37daa099a87121b17163_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c73227f14687284ed632c12fdee7db809573bf029785a7a5622f60b38a52fd88_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:46fb8a7bcf2378cb7ed3f6d1d9a8fd126d0a6b5eea6aad190d533d292b6fa5a2_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:47078d49a8f53c974e220017c77c1421421d73611ecd92303105812659106737_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:536a091643cba26882ea90dfb58582a2ecf6424b4bf763da3a678ae2c586bd0f_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9f9f8ac5d0856e701c31912eaadba138b681a20f22d733254b82245ff7a8930c_ppc64le	—	Vendor Fix fix Workaround

Known not affected 49 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:3049a7248a4ad4d649b287aae877475deafeb7b6e1d0ecbec540f816e997b568_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:43a1bdbd4f337c81bc1a789c07d716e74a4a08f8e60374769ccd1bc202cef895_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:7e13f4dc4021d19696666d180d9d05ed4bad0ed1ae88e78562b5bbfad7adc314_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:f2c0813c6867724a82635c823a56077a8dd3b9322bcd6fcb0f4bf6dc05107a23_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:11c73dd00773e8df773a920d6b983649444630725b403720cc22f61dcbd9a88a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:12ee43f548b9bbc51657e77500f399dfef7ef633b5e162007d627246a773981f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:776d8fae8372638c1824a823eb5e5f9f76a1130493e979ffdeb0d5d1102b7542_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:956eeb6721b90d9024927c2afe185f9263329bd919a0ed9aa07d55d1b1deaab8_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:2e8188fdf97e15872ed626bd136071a20200791a879245ca911dcd1063b19732_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:5b0b6b676014f1c8d8ad5d6bc99aedadaf20b5846dc68c007026592541e9d29d_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:763324f7c02cc40a8217fc8daf103b5180d1be865fe8c366f877caae08ec0198_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:b72b4f747473061d4cea48ba76b318323e2d24714f020a6e7053ed641d864d76_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:01a0a766d5f13271a60cd6e2747760e4e9a741ef112fe5e9558fdc74ef2c5cff_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:169c11b438d9308b47b3ff9db32482b56581c725459393a04c3aeb2493743a8e_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:e054ba4dfbd318419796b9e604850ba3387b3485fa2e3d75e49d766e15574b42_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:fada2e23889911805c7122c6dc4571ecc4976b1a9250f2b300a532794e5499f9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3ce6e51c799e2453155058b1e21da125f9a1d1b7107d1cc6fc27bfe4bc4c6ce7_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1cb02a116a4e4ced10ce72ce7e33a8561bebbc3a193d9cfc9105ef02ae460486_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:3b26b0470955d4675172239466f4fb5c92a44b85eb830270bd8b7f6a1bb5b784_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:7ce60bc263471d3726dbbb6edfac0c2a4b58d23adb414f63f604440ba783fce5_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:fc9d7862ed6b0ce5ffe92cdaaee509b2ae161992b8f9bdfdb6865ccb04327d35_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:4a7c40e705dd0b17f4f91f29479b0818ed138e0442a65daa3292f5663dbfc52c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:694b88929ec77e63de90cd3dcb9f3e0899182f430c973d2b1367a2bec83e8b2f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acbe8a4b057e7e659e3d421634e9115b49a9a244e6c46a96e0f131a11cae167c_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acc41ca9440443de6018641e9d8c37a31fe32ab4e6747edd022cb8ed63d5bb0f_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0c38a05e03b0b4bcd6156c3c43667436cb2b31b41ea6c1a806ce062c4b051b1f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:1723204012943c8844d04645d564955d20cd22c720f06f33e7f86181454fea55_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:2dcc79c07726598b1c8a6b398d2da30503a3dae96e640963eb2b18a85a7dd7b2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8b784c0c62cbbc470c624f08b145a02a5054216398cf7d3554400a9ff926b7ed_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:11f121479a915c5f59899f6e73afeeb299e3d6d0a1f091e7e87c51a373191093_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:25a5c98d72c1bdae4d2ecfef13433afe12897b2ec86f0609908fbf850700b884_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:2fc3444d7604901159a2f864dec6d59e3c2000bb7306c778591956c0a76b7ec5_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:bf49207dde3565ce593c0d276434c43e9fb9adcc950c3ccab53837e31ae27313_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a447e87fb55509fce9bfcf02b5571e87d9a002e331a20614bae17076ad544d3_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a7e5a72d2f82d60918e396a8cf3a973c479752de5e07bb8bd5bdbb9b1e1019c_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:51d2ba5a66f96afc8a61c6df1a147c67ca37a1aeeb9e0a40a9b3f8af56ea01e9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:7710bcfbeb5d4fe1dc98b9bb5cb3b99403fbcc2a680a159ba363530f48b8851d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:4f673d88ce055610c45123bef5c31446fdb8406d1d4969a643943f246e179c84_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:a3213419c43bfccc2fc55d9dd0115e464bd2fd8fb4e5a400cc3880f65198e9e3_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:c51e88125ea5402efd4d6d445089fe17d3e7c719d6cab72538eea0791dd2663a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:ed77f86958364fe53d8181e451581a77e242a4db791976fc7490cfcb454e589e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:8a6027f91f12a2ad6d50b64bf21fbf97a706be0fa3c05cce44df4bc1c6795462_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d313a31a1a0adde95eac4e0860b4a928a6c9c7bf00853214aa4b9c4a9be0365_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d0433de2bbd7bb21fdee82f3a0ac2f41c87675c8d525160f6697be4f52652cb6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:fcbe0ac15a63ac8b452b77c1900028e97b0237f946b3ecc9faf044168c5d7969_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:2df809162682b8c568979cce1bb298f116f4dc3673bb5f8af1fcbdca8e90ce79_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:64ffe5b3c536feb240530d14a507e9a99ec04b79f4035ade2714d5bca32cf77b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:65c3ca83edd90f463d03a1df2d375f95c1e4f39e2329d565b9ae8a462153e51e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:77c4c66043157fe503b63c347b0e67099b8e4948b8bb35dc46283aef6460c60e_ppc64le	—	Workaround

Threats

Impact Important

CVE-2026-69152

A flaw was found in the brace-expansion library. The `expand()` function does not apply `maxLength` when constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop, resulting in a denial of service. This issue is due to an incomplete mitigation of CVE-2026-14257.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 20 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:01a0a766d5f13271a60cd6e2747760e4e9a741ef112fe5e9558fdc74ef2c5cff_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:169c11b438d9308b47b3ff9db32482b56581c725459393a04c3aeb2493743a8e_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:e054ba4dfbd318419796b9e604850ba3387b3485fa2e3d75e49d766e15574b42_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:fada2e23889911805c7122c6dc4571ecc4976b1a9250f2b300a532794e5499f9_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0c38a05e03b0b4bcd6156c3c43667436cb2b31b41ea6c1a806ce062c4b051b1f_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:1723204012943c8844d04645d564955d20cd22c720f06f33e7f86181454fea55_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:2dcc79c07726598b1c8a6b398d2da30503a3dae96e640963eb2b18a85a7dd7b2_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8b784c0c62cbbc470c624f08b145a02a5054216398cf7d3554400a9ff926b7ed_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:0a5e6487fec86246ba15b38a6a3651c5cd9316d25044a3c2bdf5572d1ce5a00b_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:5cbe66e31707a799600e2927d127666f1a1a9ac69e31da0efa4aed0191bacb06_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bd9a950cc2a62fab1ce027a744868213c0dac138d46c37daa099a87121b17163_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c73227f14687284ed632c12fdee7db809573bf029785a7a5622f60b38a52fd88_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:46fb8a7bcf2378cb7ed3f6d1d9a8fd126d0a6b5eea6aad190d533d292b6fa5a2_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:47078d49a8f53c974e220017c77c1421421d73611ecd92303105812659106737_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:536a091643cba26882ea90dfb58582a2ecf6424b4bf763da3a678ae2c586bd0f_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9f9f8ac5d0856e701c31912eaadba138b681a20f22d733254b82245ff7a8930c_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:2df809162682b8c568979cce1bb298f116f4dc3673bb5f8af1fcbdca8e90ce79_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:64ffe5b3c536feb240530d14a507e9a99ec04b79f4035ade2714d5bca32cf77b_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:65c3ca83edd90f463d03a1df2d375f95c1e4f39e2329d565b9ae8a462153e51e_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:77c4c66043157fe503b63c347b0e67099b8e4948b8bb35dc46283aef6460c60e_ppc64le	—	Vendor Fix fix Workaround

Known not affected 41 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:3049a7248a4ad4d649b287aae877475deafeb7b6e1d0ecbec540f816e997b568_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:43a1bdbd4f337c81bc1a789c07d716e74a4a08f8e60374769ccd1bc202cef895_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:7e13f4dc4021d19696666d180d9d05ed4bad0ed1ae88e78562b5bbfad7adc314_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:f2c0813c6867724a82635c823a56077a8dd3b9322bcd6fcb0f4bf6dc05107a23_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:11c73dd00773e8df773a920d6b983649444630725b403720cc22f61dcbd9a88a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:12ee43f548b9bbc51657e77500f399dfef7ef633b5e162007d627246a773981f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:776d8fae8372638c1824a823eb5e5f9f76a1130493e979ffdeb0d5d1102b7542_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:956eeb6721b90d9024927c2afe185f9263329bd919a0ed9aa07d55d1b1deaab8_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:2e8188fdf97e15872ed626bd136071a20200791a879245ca911dcd1063b19732_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:5b0b6b676014f1c8d8ad5d6bc99aedadaf20b5846dc68c007026592541e9d29d_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:763324f7c02cc40a8217fc8daf103b5180d1be865fe8c366f877caae08ec0198_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:b72b4f747473061d4cea48ba76b318323e2d24714f020a6e7053ed641d864d76_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3ce6e51c799e2453155058b1e21da125f9a1d1b7107d1cc6fc27bfe4bc4c6ce7_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1cb02a116a4e4ced10ce72ce7e33a8561bebbc3a193d9cfc9105ef02ae460486_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:3b26b0470955d4675172239466f4fb5c92a44b85eb830270bd8b7f6a1bb5b784_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:7ce60bc263471d3726dbbb6edfac0c2a4b58d23adb414f63f604440ba783fce5_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:fc9d7862ed6b0ce5ffe92cdaaee509b2ae161992b8f9bdfdb6865ccb04327d35_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:4a7c40e705dd0b17f4f91f29479b0818ed138e0442a65daa3292f5663dbfc52c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:694b88929ec77e63de90cd3dcb9f3e0899182f430c973d2b1367a2bec83e8b2f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acbe8a4b057e7e659e3d421634e9115b49a9a244e6c46a96e0f131a11cae167c_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acc41ca9440443de6018641e9d8c37a31fe32ab4e6747edd022cb8ed63d5bb0f_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3e128932a688e7db59a8057bf9c2e84f01004143aaef5f8f8ee4cdfd33d90cfb_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3fa328a585adc80b2870d2841d3db177745c6b29605c69fb077f15cb49c63ba8_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:82ca34ecce0f6b9de413147167c5a2faec1f98b409c21a6fe7d00a56a1fef1f1_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f0d13754868e1f1d08523c2459e1f0a8b7c937e27da82b19b0f1ae73f989384d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:11f121479a915c5f59899f6e73afeeb299e3d6d0a1f091e7e87c51a373191093_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:25a5c98d72c1bdae4d2ecfef13433afe12897b2ec86f0609908fbf850700b884_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:2fc3444d7604901159a2f864dec6d59e3c2000bb7306c778591956c0a76b7ec5_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:bf49207dde3565ce593c0d276434c43e9fb9adcc950c3ccab53837e31ae27313_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a447e87fb55509fce9bfcf02b5571e87d9a002e331a20614bae17076ad544d3_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a7e5a72d2f82d60918e396a8cf3a973c479752de5e07bb8bd5bdbb9b1e1019c_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:51d2ba5a66f96afc8a61c6df1a147c67ca37a1aeeb9e0a40a9b3f8af56ea01e9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:7710bcfbeb5d4fe1dc98b9bb5cb3b99403fbcc2a680a159ba363530f48b8851d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:4f673d88ce055610c45123bef5c31446fdb8406d1d4969a643943f246e179c84_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:a3213419c43bfccc2fc55d9dd0115e464bd2fd8fb4e5a400cc3880f65198e9e3_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:c51e88125ea5402efd4d6d445089fe17d3e7c719d6cab72538eea0791dd2663a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:ed77f86958364fe53d8181e451581a77e242a4db791976fc7490cfcb454e589e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:8a6027f91f12a2ad6d50b64bf21fbf97a706be0fa3c05cce44df4bc1c6795462_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d313a31a1a0adde95eac4e0860b4a928a6c9c7bf00853214aa4b9c4a9be0365_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d0433de2bbd7bb21fdee82f3a0ac2f41c87675c8d525160f6697be4f52652cb6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:fcbe0ac15a63ac8b452b77c1900028e97b0237f946b3ecc9faf044168c5d7969_s390x	—	Workaround

Threats

Impact Important

CVE-2026-69192

A flaw was found in the `ip-address` library. This library incorrectly interprets IPv4 address octets with leading zeros as decimal, while standard network parsers interpret them as octal. This inconsistency can cause applications to misclassify network targets, allowing a remote attacker to bypass security measures like Server-Side Request Forgery (SSRF) filters and potentially gain unauthorized access to internal systems.

8.6 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

CWE-1389 - Incorrect Parsing of Numbers with Different Radices

Affected products

Fixed 4 products, the same list as for CVE-2026-8643

Known not affected 57 products, the same list as for CVE-2026-8643

Threats

Impact Important

CVE-2026-71290

A flaw was found in the asynchronous version of Apache HttpComponents Client. This improper Transport Layer Security (TLS) hostname verification vulnerability allows a remote attacker to intercept and modify network traffic. By presenting a valid certificate for a different domain, an attacker can impersonate the server, leading to a Man-in-the-Middle (MITM) attack and compromising communication.

8.1 (High)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-295 - Improper Certificate Validation

Affected products

Fixed 12 products, the same list as for CVE-2026-14682

Known not affected 49 products, the same list as for CVE-2026-14682

Threats

Impact Important

CVE-2026-71324

A flaw was found in Traefik. Traefik's HTTP reverse proxy can improperly handle HTTP/2 or HTTP/3 CONNECT requests forwarded to an HTTP/1.1 upstream. If the upstream sends a keep-alive non-2xx response and does not fully drain the body, the desynchronized backend socket is returned to a shared pool. An unauthenticated attacker can exploit this by making a different client read their smuggled response, which can lead to information disclosure, potentially exposing authenticated or private content from other requests. The ForwardAuth middleware can also be affected, further exposing the authentication client pool to desynchronization.

8.6 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

Affected products

Fixed 4 products, the same list as for CVE-2026-17106

Known not affected 57 products, the same list as for CVE-2026-17106

Threats

Impact Important

CVE-2026-71325

A flaw was found in Traefik. This flaw allows a tenant, even when restricted by Role-Based Access Control (RBAC) to a single namespace, to bypass namespace isolation. By binding their own router to a TraefikService in another namespace, an attacker can expose or reroute that namespace's backend services. This defeats the intended `allowCrossNamespace=false` enforcement, leading to unauthorized access or manipulation of services across namespaces.

8.7 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L

CWE-653 - Improper Isolation or Compartmentalization

Affected products

Fixed 4 products, the same list as for CVE-2026-17106

Known not affected 57 products, the same list as for CVE-2026-17106

Threats

Impact Important

CVE-2026-71327

A flaw was found in Traefik, an open-source HTTP reverse proxy and load balancer. Its Kubernetes Gateway API provider incorrectly generates unique identifiers for routes and services. This vulnerability allows an attacker to create conflicting routes, which can then overwrite the backend services of another isolated environment (namespace). This could lead to unauthorized control over services in different namespaces.

8.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-1220 - Insufficient Granularity of Access Control

Affected products

Fixed 4 products, the same list as for CVE-2026-17106

Known not affected 57 products, the same list as for CVE-2026-17106

Threats

Impact Important

CVE-2026-73500

A flaw was found in etcd, a distributed key-value store. A remote attacker can exploit this by opening numerous TCP connections to an etcd TLS listener without completing the TLS handshake. This action causes the `tlsListener.acceptLoop` to spawn an unbounded number of goroutines, which consume excessive memory. This resource exhaustion leads to a Denial of Service (DoS) for the etcd cluster and, consequently, for the Kubernetes control plane it supports.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products, the same list as for CVE-2026-17106

Known not affected 57 products, the same list as for CVE-2026-17106

Threats

Impact Important

CVE-2026-73508

A flaw was found in Netty, an asynchronous network application framework. When processing malformed domain names in DNS packets, the DNS record decoder fails to release allocated memory. This vulnerability allows an unauthenticated remote attacker to incrementally leak direct memory, eventually leading to a denial of service.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-772 - Missing Release of Resource after Effective Lifetime

Affected products

Fixed 4 products, the same list as for CVE-2026-15076

Known not affected 57 products, the same list as for CVE-2026-15076

Threats

Impact Important

CVE-2026-74835

A flaw was found in the inets application HTTP server httpd. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted chunked request that fails to enforce a configured body-size limit. This can lead to memory exhaustion, causing a Denial of Service (DoS) on the affected system.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1284 - Improper Validation of Specified Quantity in Input

Affected products

Fixed 4 products, the same list as for CVE-2026-17106

Known not affected 57 products, the same list as for CVE-2026-17106

Threats

Impact Important

CVE-2026-75838

A flaw was found in DOMPurify. This cross-site scripting vulnerability occurs during IN_PLACE sanitization, where element-removal hooks fail to neutralize detached subtrees. A remote attacker can exploit this by supplying specially crafted HTML with event handlers. This allows the execution of malicious scripts even after the HTML appears to be sanitized, leading to potential information disclosure or unauthorized actions.

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 4 products, the same list as for CVE-2023-54404

Known not affected 57 products, the same list as for CVE-2023-54404

Threats

Impact Moderate

CVE-2026-75899

A flaw was found in fast-uri, a URI parser for Node.js. The component incorrectly decodes percent escapes in a hostname twice during URI parsing and authority recomposition. This double decoding can allow a remote attacker to manipulate a URI to point to a different network destination, such as a loopback address. This vulnerability can lead to Server-Side Request Forgery (SSRF) and bypass host-based security policies.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-140 - Improper Neutralization of Delimiters

Affected products

Fixed 4 products, the same list as for CVE-2023-54404

Known not affected 57 products, the same list as for CVE-2023-54404

Threats

Impact Important

CVE-2026-75931

A flaw was found in fast-uri, a URI parser for Node.js. This vulnerability arises because the parser fails to consistently convert internationalized domain names (IDN) to their standard ASCII form when processing scheme-relative references. This inconsistency can lead to host confusion, where an application might validate a URI against a security policy using one hostname, but then resolve to a different, potentially malicious, hostname. This discrepancy could allow an attacker to bypass security policies and access unauthorized resources.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

Affected products

Fixed 4 products, the same list as for CVE-2023-54404

Known not affected 57 products, the same list as for CVE-2023-54404

Threats

Impact Important

CVE-2026-76169

A flaw was found in fastify. Malformed URLs can be routed to a custom not-found handler of a different plugin, bypassing the intended security checks. This allows an unauthenticated attacker to access and read the full response of an authentication-protected private fallback, leading to information disclosure and an authentication bypass.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-289 - Authentication Bypass by Alternate Name

Affected products

Fixed 4 products, the same list as for CVE-2026-18427

Known not affected 57 products, the same list as for CVE-2026-18427

Threats

Impact Important

CVE-2026-81521

A flaw was found in the MongoDB Go Driver. The `Client.BulkWrite` operation does not properly validate database names, allowing a specially crafted name with reserved characters to redirect write operations. This vulnerability could enable an attacker to modify or corrupt data in unintended databases and collections.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-791 - Incomplete Filtering of Special Elements

Affected products

Fixed 4 products, the same list as for CVE-2026-8643

Known not affected 57 products, the same list as for CVE-2026-8643

Threats

Impact Important

CVE-2026-82417

A flaw was found in qs. The `qs.stringify` function, responsible for serializing objects, does not properly validate the `isBuffer` property of an object's constructor before attempting to invoke it. An unauthenticated attacker can provide specially crafted input that, when processed and then serialized by `qs.stringify`, triggers a `TypeError`. This vulnerability can lead to a Denial of Service (DoS), causing affected applications to return a 500 error or, in certain scenarios, terminate the application process.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1287 - Improper Validation of Specified Type of Input

Affected products

Fixed 20 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:3049a7248a4ad4d649b287aae877475deafeb7b6e1d0ecbec540f816e997b568_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:43a1bdbd4f337c81bc1a789c07d716e74a4a08f8e60374769ccd1bc202cef895_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:7e13f4dc4021d19696666d180d9d05ed4bad0ed1ae88e78562b5bbfad7adc314_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:f2c0813c6867724a82635c823a56077a8dd3b9322bcd6fcb0f4bf6dc05107a23_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:01a0a766d5f13271a60cd6e2747760e4e9a741ef112fe5e9558fdc74ef2c5cff_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:169c11b438d9308b47b3ff9db32482b56581c725459393a04c3aeb2493743a8e_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:e054ba4dfbd318419796b9e604850ba3387b3485fa2e3d75e49d766e15574b42_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:fada2e23889911805c7122c6dc4571ecc4976b1a9250f2b300a532794e5499f9_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0c38a05e03b0b4bcd6156c3c43667436cb2b31b41ea6c1a806ce062c4b051b1f_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:1723204012943c8844d04645d564955d20cd22c720f06f33e7f86181454fea55_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:2dcc79c07726598b1c8a6b398d2da30503a3dae96e640963eb2b18a85a7dd7b2_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8b784c0c62cbbc470c624f08b145a02a5054216398cf7d3554400a9ff926b7ed_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:0a5e6487fec86246ba15b38a6a3651c5cd9316d25044a3c2bdf5572d1ce5a00b_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:5cbe66e31707a799600e2927d127666f1a1a9ac69e31da0efa4aed0191bacb06_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bd9a950cc2a62fab1ce027a744868213c0dac138d46c37daa099a87121b17163_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c73227f14687284ed632c12fdee7db809573bf029785a7a5622f60b38a52fd88_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:46fb8a7bcf2378cb7ed3f6d1d9a8fd126d0a6b5eea6aad190d533d292b6fa5a2_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:47078d49a8f53c974e220017c77c1421421d73611ecd92303105812659106737_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:536a091643cba26882ea90dfb58582a2ecf6424b4bf763da3a678ae2c586bd0f_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9f9f8ac5d0856e701c31912eaadba138b681a20f22d733254b82245ff7a8930c_ppc64le	—	Vendor Fix fix Workaround

Known not affected 41 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:11c73dd00773e8df773a920d6b983649444630725b403720cc22f61dcbd9a88a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:12ee43f548b9bbc51657e77500f399dfef7ef633b5e162007d627246a773981f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:776d8fae8372638c1824a823eb5e5f9f76a1130493e979ffdeb0d5d1102b7542_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:956eeb6721b90d9024927c2afe185f9263329bd919a0ed9aa07d55d1b1deaab8_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:2e8188fdf97e15872ed626bd136071a20200791a879245ca911dcd1063b19732_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:5b0b6b676014f1c8d8ad5d6bc99aedadaf20b5846dc68c007026592541e9d29d_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:763324f7c02cc40a8217fc8daf103b5180d1be865fe8c366f877caae08ec0198_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:b72b4f747473061d4cea48ba76b318323e2d24714f020a6e7053ed641d864d76_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3ce6e51c799e2453155058b1e21da125f9a1d1b7107d1cc6fc27bfe4bc4c6ce7_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1cb02a116a4e4ced10ce72ce7e33a8561bebbc3a193d9cfc9105ef02ae460486_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:3b26b0470955d4675172239466f4fb5c92a44b85eb830270bd8b7f6a1bb5b784_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:7ce60bc263471d3726dbbb6edfac0c2a4b58d23adb414f63f604440ba783fce5_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:fc9d7862ed6b0ce5ffe92cdaaee509b2ae161992b8f9bdfdb6865ccb04327d35_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:4a7c40e705dd0b17f4f91f29479b0818ed138e0442a65daa3292f5663dbfc52c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:694b88929ec77e63de90cd3dcb9f3e0899182f430c973d2b1367a2bec83e8b2f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acbe8a4b057e7e659e3d421634e9115b49a9a244e6c46a96e0f131a11cae167c_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acc41ca9440443de6018641e9d8c37a31fe32ab4e6747edd022cb8ed63d5bb0f_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3e128932a688e7db59a8057bf9c2e84f01004143aaef5f8f8ee4cdfd33d90cfb_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3fa328a585adc80b2870d2841d3db177745c6b29605c69fb077f15cb49c63ba8_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:82ca34ecce0f6b9de413147167c5a2faec1f98b409c21a6fe7d00a56a1fef1f1_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f0d13754868e1f1d08523c2459e1f0a8b7c937e27da82b19b0f1ae73f989384d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:11f121479a915c5f59899f6e73afeeb299e3d6d0a1f091e7e87c51a373191093_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:25a5c98d72c1bdae4d2ecfef13433afe12897b2ec86f0609908fbf850700b884_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:2fc3444d7604901159a2f864dec6d59e3c2000bb7306c778591956c0a76b7ec5_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:bf49207dde3565ce593c0d276434c43e9fb9adcc950c3ccab53837e31ae27313_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a447e87fb55509fce9bfcf02b5571e87d9a002e331a20614bae17076ad544d3_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a7e5a72d2f82d60918e396a8cf3a973c479752de5e07bb8bd5bdbb9b1e1019c_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:51d2ba5a66f96afc8a61c6df1a147c67ca37a1aeeb9e0a40a9b3f8af56ea01e9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:7710bcfbeb5d4fe1dc98b9bb5cb3b99403fbcc2a680a159ba363530f48b8851d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:4f673d88ce055610c45123bef5c31446fdb8406d1d4969a643943f246e179c84_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:a3213419c43bfccc2fc55d9dd0115e464bd2fd8fb4e5a400cc3880f65198e9e3_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:c51e88125ea5402efd4d6d445089fe17d3e7c719d6cab72538eea0791dd2663a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:ed77f86958364fe53d8181e451581a77e242a4db791976fc7490cfcb454e589e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:8a6027f91f12a2ad6d50b64bf21fbf97a706be0fa3c05cce44df4bc1c6795462_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d313a31a1a0adde95eac4e0860b4a928a6c9c7bf00853214aa4b9c4a9be0365_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d0433de2bbd7bb21fdee82f3a0ac2f41c87675c8d525160f6697be4f52652cb6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:fcbe0ac15a63ac8b452b77c1900028e97b0237f946b3ecc9faf044168c5d7969_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:2df809162682b8c568979cce1bb298f116f4dc3673bb5f8af1fcbdca8e90ce79_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:64ffe5b3c536feb240530d14a507e9a99ec04b79f4035ade2714d5bca32cf77b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:65c3ca83edd90f463d03a1df2d375f95c1e4f39e2329d565b9ae8a462153e51e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:77c4c66043157fe503b63c347b0e67099b8e4948b8bb35dc46283aef6460c60e_ppc64le	—	Workaround

Threats

Impact Important

CVE-2026-82562

A flaw was found in qs. An unauthenticated attacker can exploit this by sending a specially crafted query string to an application using `qs.parse` with specific non-default settings (`comma: true` and `throwOnLimitExceeded: true`). This bypasses a configured array limit, causing the parser to allocate an excessively large array. This can lead to a Denial of Service (DoS) by consuming too much memory.

3.7 (Low)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 16 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:3049a7248a4ad4d649b287aae877475deafeb7b6e1d0ecbec540f816e997b568_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:43a1bdbd4f337c81bc1a789c07d716e74a4a08f8e60374769ccd1bc202cef895_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:7e13f4dc4021d19696666d180d9d05ed4bad0ed1ae88e78562b5bbfad7adc314_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:f2c0813c6867724a82635c823a56077a8dd3b9322bcd6fcb0f4bf6dc05107a23_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0c38a05e03b0b4bcd6156c3c43667436cb2b31b41ea6c1a806ce062c4b051b1f_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:1723204012943c8844d04645d564955d20cd22c720f06f33e7f86181454fea55_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:2dcc79c07726598b1c8a6b398d2da30503a3dae96e640963eb2b18a85a7dd7b2_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8b784c0c62cbbc470c624f08b145a02a5054216398cf7d3554400a9ff926b7ed_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:0a5e6487fec86246ba15b38a6a3651c5cd9316d25044a3c2bdf5572d1ce5a00b_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:5cbe66e31707a799600e2927d127666f1a1a9ac69e31da0efa4aed0191bacb06_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bd9a950cc2a62fab1ce027a744868213c0dac138d46c37daa099a87121b17163_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c73227f14687284ed632c12fdee7db809573bf029785a7a5622f60b38a52fd88_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:46fb8a7bcf2378cb7ed3f6d1d9a8fd126d0a6b5eea6aad190d533d292b6fa5a2_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:47078d49a8f53c974e220017c77c1421421d73611ecd92303105812659106737_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:536a091643cba26882ea90dfb58582a2ecf6424b4bf763da3a678ae2c586bd0f_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9f9f8ac5d0856e701c31912eaadba138b681a20f22d733254b82245ff7a8930c_ppc64le	—	Vendor Fix fix Workaround

Known not affected 45 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:11c73dd00773e8df773a920d6b983649444630725b403720cc22f61dcbd9a88a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:12ee43f548b9bbc51657e77500f399dfef7ef633b5e162007d627246a773981f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:776d8fae8372638c1824a823eb5e5f9f76a1130493e979ffdeb0d5d1102b7542_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:956eeb6721b90d9024927c2afe185f9263329bd919a0ed9aa07d55d1b1deaab8_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:2e8188fdf97e15872ed626bd136071a20200791a879245ca911dcd1063b19732_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:5b0b6b676014f1c8d8ad5d6bc99aedadaf20b5846dc68c007026592541e9d29d_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:763324f7c02cc40a8217fc8daf103b5180d1be865fe8c366f877caae08ec0198_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:b72b4f747473061d4cea48ba76b318323e2d24714f020a6e7053ed641d864d76_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:01a0a766d5f13271a60cd6e2747760e4e9a741ef112fe5e9558fdc74ef2c5cff_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:169c11b438d9308b47b3ff9db32482b56581c725459393a04c3aeb2493743a8e_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:e054ba4dfbd318419796b9e604850ba3387b3485fa2e3d75e49d766e15574b42_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:fada2e23889911805c7122c6dc4571ecc4976b1a9250f2b300a532794e5499f9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3ce6e51c799e2453155058b1e21da125f9a1d1b7107d1cc6fc27bfe4bc4c6ce7_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1cb02a116a4e4ced10ce72ce7e33a8561bebbc3a193d9cfc9105ef02ae460486_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:3b26b0470955d4675172239466f4fb5c92a44b85eb830270bd8b7f6a1bb5b784_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:7ce60bc263471d3726dbbb6edfac0c2a4b58d23adb414f63f604440ba783fce5_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:fc9d7862ed6b0ce5ffe92cdaaee509b2ae161992b8f9bdfdb6865ccb04327d35_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:4a7c40e705dd0b17f4f91f29479b0818ed138e0442a65daa3292f5663dbfc52c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:694b88929ec77e63de90cd3dcb9f3e0899182f430c973d2b1367a2bec83e8b2f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acbe8a4b057e7e659e3d421634e9115b49a9a244e6c46a96e0f131a11cae167c_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acc41ca9440443de6018641e9d8c37a31fe32ab4e6747edd022cb8ed63d5bb0f_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3e128932a688e7db59a8057bf9c2e84f01004143aaef5f8f8ee4cdfd33d90cfb_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3fa328a585adc80b2870d2841d3db177745c6b29605c69fb077f15cb49c63ba8_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:82ca34ecce0f6b9de413147167c5a2faec1f98b409c21a6fe7d00a56a1fef1f1_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f0d13754868e1f1d08523c2459e1f0a8b7c937e27da82b19b0f1ae73f989384d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:11f121479a915c5f59899f6e73afeeb299e3d6d0a1f091e7e87c51a373191093_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:25a5c98d72c1bdae4d2ecfef13433afe12897b2ec86f0609908fbf850700b884_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:2fc3444d7604901159a2f864dec6d59e3c2000bb7306c778591956c0a76b7ec5_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:bf49207dde3565ce593c0d276434c43e9fb9adcc950c3ccab53837e31ae27313_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a447e87fb55509fce9bfcf02b5571e87d9a002e331a20614bae17076ad544d3_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a7e5a72d2f82d60918e396a8cf3a973c479752de5e07bb8bd5bdbb9b1e1019c_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:51d2ba5a66f96afc8a61c6df1a147c67ca37a1aeeb9e0a40a9b3f8af56ea01e9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:7710bcfbeb5d4fe1dc98b9bb5cb3b99403fbcc2a680a159ba363530f48b8851d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:4f673d88ce055610c45123bef5c31446fdb8406d1d4969a643943f246e179c84_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:a3213419c43bfccc2fc55d9dd0115e464bd2fd8fb4e5a400cc3880f65198e9e3_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:c51e88125ea5402efd4d6d445089fe17d3e7c719d6cab72538eea0791dd2663a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:ed77f86958364fe53d8181e451581a77e242a4db791976fc7490cfcb454e589e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:8a6027f91f12a2ad6d50b64bf21fbf97a706be0fa3c05cce44df4bc1c6795462_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d313a31a1a0adde95eac4e0860b4a928a6c9c7bf00853214aa4b9c4a9be0365_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d0433de2bbd7bb21fdee82f3a0ac2f41c87675c8d525160f6697be4f52652cb6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:fcbe0ac15a63ac8b452b77c1900028e97b0237f946b3ecc9faf044168c5d7969_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:2df809162682b8c568979cce1bb298f116f4dc3673bb5f8af1fcbdca8e90ce79_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:64ffe5b3c536feb240530d14a507e9a99ec04b79f4035ade2714d5bca32cf77b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:65c3ca83edd90f463d03a1df2d375f95c1e4f39e2329d565b9ae8a462153e51e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:77c4c66043157fe503b63c347b0e67099b8e4948b8bb35dc46283aef6460c60e_ppc64le	—	Workaround

Threats

Impact Low

CVE-2026-84292

A flaw was found in fast-uri. This component improperly serializes the port component of a Uniform Resource Identifier (URI) without validating its content. A remote attacker can exploit this by crafting a malicious port value that injects authority delimiters. This manipulation can demote the intended host to user information and redirect the authority to an attacker-controlled host, leading to information disclosure as applications interpret the attacker's host as legitimate.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-140 - Improper Neutralization of Delimiters

Affected products

Fixed 4 products, the same list as for CVE-2023-54404

Known not affected 57 products, the same list as for CVE-2023-54404

Threats

Impact Important

CVE-2026-84375

A flaw was found in js-yaml, a JavaScript YAML parser. An attacker can exploit this by providing a specially crafted YAML document that causes the parser to perform excessive processing when handling merge keys with empty sources. This can lead to prolonged CPU consumption, effectively causing a denial of service (DoS) for applications that process untrusted YAML input.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:3049a7248a4ad4d649b287aae877475deafeb7b6e1d0ecbec540f816e997b568_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:43a1bdbd4f337c81bc1a789c07d716e74a4a08f8e60374769ccd1bc202cef895_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:7e13f4dc4021d19696666d180d9d05ed4bad0ed1ae88e78562b5bbfad7adc314_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:f2c0813c6867724a82635c823a56077a8dd3b9322bcd6fcb0f4bf6dc05107a23_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:01a0a766d5f13271a60cd6e2747760e4e9a741ef112fe5e9558fdc74ef2c5cff_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:169c11b438d9308b47b3ff9db32482b56581c725459393a04c3aeb2493743a8e_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:e054ba4dfbd318419796b9e604850ba3387b3485fa2e3d75e49d766e15574b42_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:fada2e23889911805c7122c6dc4571ecc4976b1a9250f2b300a532794e5499f9_ppc64le	—	Vendor Fix fix

Known not affected 53 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:11c73dd00773e8df773a920d6b983649444630725b403720cc22f61dcbd9a88a_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:12ee43f548b9bbc51657e77500f399dfef7ef633b5e162007d627246a773981f_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:776d8fae8372638c1824a823eb5e5f9f76a1130493e979ffdeb0d5d1102b7542_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:956eeb6721b90d9024927c2afe185f9263329bd919a0ed9aa07d55d1b1deaab8_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:2e8188fdf97e15872ed626bd136071a20200791a879245ca911dcd1063b19732_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:5b0b6b676014f1c8d8ad5d6bc99aedadaf20b5846dc68c007026592541e9d29d_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:763324f7c02cc40a8217fc8daf103b5180d1be865fe8c366f877caae08ec0198_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:b72b4f747473061d4cea48ba76b318323e2d24714f020a6e7053ed641d864d76_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3ce6e51c799e2453155058b1e21da125f9a1d1b7107d1cc6fc27bfe4bc4c6ce7_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1cb02a116a4e4ced10ce72ce7e33a8561bebbc3a193d9cfc9105ef02ae460486_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:3b26b0470955d4675172239466f4fb5c92a44b85eb830270bd8b7f6a1bb5b784_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:7ce60bc263471d3726dbbb6edfac0c2a4b58d23adb414f63f604440ba783fce5_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:fc9d7862ed6b0ce5ffe92cdaaee509b2ae161992b8f9bdfdb6865ccb04327d35_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:4a7c40e705dd0b17f4f91f29479b0818ed138e0442a65daa3292f5663dbfc52c_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:694b88929ec77e63de90cd3dcb9f3e0899182f430c973d2b1367a2bec83e8b2f_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acbe8a4b057e7e659e3d421634e9115b49a9a244e6c46a96e0f131a11cae167c_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acc41ca9440443de6018641e9d8c37a31fe32ab4e6747edd022cb8ed63d5bb0f_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0c38a05e03b0b4bcd6156c3c43667436cb2b31b41ea6c1a806ce062c4b051b1f_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:1723204012943c8844d04645d564955d20cd22c720f06f33e7f86181454fea55_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:2dcc79c07726598b1c8a6b398d2da30503a3dae96e640963eb2b18a85a7dd7b2_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8b784c0c62cbbc470c624f08b145a02a5054216398cf7d3554400a9ff926b7ed_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3e128932a688e7db59a8057bf9c2e84f01004143aaef5f8f8ee4cdfd33d90cfb_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3fa328a585adc80b2870d2841d3db177745c6b29605c69fb077f15cb49c63ba8_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:82ca34ecce0f6b9de413147167c5a2faec1f98b409c21a6fe7d00a56a1fef1f1_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f0d13754868e1f1d08523c2459e1f0a8b7c937e27da82b19b0f1ae73f989384d_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:11f121479a915c5f59899f6e73afeeb299e3d6d0a1f091e7e87c51a373191093_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:25a5c98d72c1bdae4d2ecfef13433afe12897b2ec86f0609908fbf850700b884_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:2fc3444d7604901159a2f864dec6d59e3c2000bb7306c778591956c0a76b7ec5_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:bf49207dde3565ce593c0d276434c43e9fb9adcc950c3ccab53837e31ae27313_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:0a5e6487fec86246ba15b38a6a3651c5cd9316d25044a3c2bdf5572d1ce5a00b_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:5cbe66e31707a799600e2927d127666f1a1a9ac69e31da0efa4aed0191bacb06_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bd9a950cc2a62fab1ce027a744868213c0dac138d46c37daa099a87121b17163_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c73227f14687284ed632c12fdee7db809573bf029785a7a5622f60b38a52fd88_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:46fb8a7bcf2378cb7ed3f6d1d9a8fd126d0a6b5eea6aad190d533d292b6fa5a2_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:47078d49a8f53c974e220017c77c1421421d73611ecd92303105812659106737_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:536a091643cba26882ea90dfb58582a2ecf6424b4bf763da3a678ae2c586bd0f_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9f9f8ac5d0856e701c31912eaadba138b681a20f22d733254b82245ff7a8930c_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a447e87fb55509fce9bfcf02b5571e87d9a002e331a20614bae17076ad544d3_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a7e5a72d2f82d60918e396a8cf3a973c479752de5e07bb8bd5bdbb9b1e1019c_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:51d2ba5a66f96afc8a61c6df1a147c67ca37a1aeeb9e0a40a9b3f8af56ea01e9_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:7710bcfbeb5d4fe1dc98b9bb5cb3b99403fbcc2a680a159ba363530f48b8851d_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:4f673d88ce055610c45123bef5c31446fdb8406d1d4969a643943f246e179c84_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:a3213419c43bfccc2fc55d9dd0115e464bd2fd8fb4e5a400cc3880f65198e9e3_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:c51e88125ea5402efd4d6d445089fe17d3e7c719d6cab72538eea0791dd2663a_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:ed77f86958364fe53d8181e451581a77e242a4db791976fc7490cfcb454e589e_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:8a6027f91f12a2ad6d50b64bf21fbf97a706be0fa3c05cce44df4bc1c6795462_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d313a31a1a0adde95eac4e0860b4a928a6c9c7bf00853214aa4b9c4a9be0365_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d0433de2bbd7bb21fdee82f3a0ac2f41c87675c8d525160f6697be4f52652cb6_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:fcbe0ac15a63ac8b452b77c1900028e97b0237f946b3ecc9faf044168c5d7969_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:2df809162682b8c568979cce1bb298f116f4dc3673bb5f8af1fcbdca8e90ce79_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:64ffe5b3c536feb240530d14a507e9a99ec04b79f4035ade2714d5bca32cf77b_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:65c3ca83edd90f463d03a1df2d375f95c1e4f39e2329d565b9ae8a462153e51e_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:77c4c66043157fe503b63c347b0e67099b8e4948b8bb35dc46283aef6460c60e_ppc64le		—

Threats

Impact Moderate

CVE-2026-84394

A flaw was found in fast-uri. The library incorrectly processes Uniform Resource Identifier (URI) hosts containing unbalanced brackets, leading to a discrepancy in how the host is parsed by fast-uri compared to other HTTP clients. This host confusion can allow an attacker to bypass security policies, such as Server-Side Request Forgery (SSRF) denylists or redirect allowlists, by causing an application to evaluate its policy against an incorrect host string. This could result in unintended network requests or access to unauthorized resources.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-1289 - Improper Validation of Unsafe Equivalence in Input

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:3049a7248a4ad4d649b287aae877475deafeb7b6e1d0ecbec540f816e997b568_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:43a1bdbd4f337c81bc1a789c07d716e74a4a08f8e60374769ccd1bc202cef895_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:7e13f4dc4021d19696666d180d9d05ed4bad0ed1ae88e78562b5bbfad7adc314_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:f2c0813c6867724a82635c823a56077a8dd3b9322bcd6fcb0f4bf6dc05107a23_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:46fb8a7bcf2378cb7ed3f6d1d9a8fd126d0a6b5eea6aad190d533d292b6fa5a2_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:47078d49a8f53c974e220017c77c1421421d73611ecd92303105812659106737_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:536a091643cba26882ea90dfb58582a2ecf6424b4bf763da3a678ae2c586bd0f_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9f9f8ac5d0856e701c31912eaadba138b681a20f22d733254b82245ff7a8930c_ppc64le	—	Vendor Fix fix

Known not affected 53 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:11c73dd00773e8df773a920d6b983649444630725b403720cc22f61dcbd9a88a_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:12ee43f548b9bbc51657e77500f399dfef7ef633b5e162007d627246a773981f_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:776d8fae8372638c1824a823eb5e5f9f76a1130493e979ffdeb0d5d1102b7542_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:956eeb6721b90d9024927c2afe185f9263329bd919a0ed9aa07d55d1b1deaab8_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:2e8188fdf97e15872ed626bd136071a20200791a879245ca911dcd1063b19732_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:5b0b6b676014f1c8d8ad5d6bc99aedadaf20b5846dc68c007026592541e9d29d_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:763324f7c02cc40a8217fc8daf103b5180d1be865fe8c366f877caae08ec0198_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:b72b4f747473061d4cea48ba76b318323e2d24714f020a6e7053ed641d864d76_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:01a0a766d5f13271a60cd6e2747760e4e9a741ef112fe5e9558fdc74ef2c5cff_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:169c11b438d9308b47b3ff9db32482b56581c725459393a04c3aeb2493743a8e_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:e054ba4dfbd318419796b9e604850ba3387b3485fa2e3d75e49d766e15574b42_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:fada2e23889911805c7122c6dc4571ecc4976b1a9250f2b300a532794e5499f9_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3ce6e51c799e2453155058b1e21da125f9a1d1b7107d1cc6fc27bfe4bc4c6ce7_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1cb02a116a4e4ced10ce72ce7e33a8561bebbc3a193d9cfc9105ef02ae460486_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:3b26b0470955d4675172239466f4fb5c92a44b85eb830270bd8b7f6a1bb5b784_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:7ce60bc263471d3726dbbb6edfac0c2a4b58d23adb414f63f604440ba783fce5_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:fc9d7862ed6b0ce5ffe92cdaaee509b2ae161992b8f9bdfdb6865ccb04327d35_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:4a7c40e705dd0b17f4f91f29479b0818ed138e0442a65daa3292f5663dbfc52c_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:694b88929ec77e63de90cd3dcb9f3e0899182f430c973d2b1367a2bec83e8b2f_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acbe8a4b057e7e659e3d421634e9115b49a9a244e6c46a96e0f131a11cae167c_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acc41ca9440443de6018641e9d8c37a31fe32ab4e6747edd022cb8ed63d5bb0f_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0c38a05e03b0b4bcd6156c3c43667436cb2b31b41ea6c1a806ce062c4b051b1f_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:1723204012943c8844d04645d564955d20cd22c720f06f33e7f86181454fea55_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:2dcc79c07726598b1c8a6b398d2da30503a3dae96e640963eb2b18a85a7dd7b2_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8b784c0c62cbbc470c624f08b145a02a5054216398cf7d3554400a9ff926b7ed_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3e128932a688e7db59a8057bf9c2e84f01004143aaef5f8f8ee4cdfd33d90cfb_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3fa328a585adc80b2870d2841d3db177745c6b29605c69fb077f15cb49c63ba8_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:82ca34ecce0f6b9de413147167c5a2faec1f98b409c21a6fe7d00a56a1fef1f1_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f0d13754868e1f1d08523c2459e1f0a8b7c937e27da82b19b0f1ae73f989384d_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:11f121479a915c5f59899f6e73afeeb299e3d6d0a1f091e7e87c51a373191093_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:25a5c98d72c1bdae4d2ecfef13433afe12897b2ec86f0609908fbf850700b884_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:2fc3444d7604901159a2f864dec6d59e3c2000bb7306c778591956c0a76b7ec5_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:bf49207dde3565ce593c0d276434c43e9fb9adcc950c3ccab53837e31ae27313_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:0a5e6487fec86246ba15b38a6a3651c5cd9316d25044a3c2bdf5572d1ce5a00b_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:5cbe66e31707a799600e2927d127666f1a1a9ac69e31da0efa4aed0191bacb06_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bd9a950cc2a62fab1ce027a744868213c0dac138d46c37daa099a87121b17163_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c73227f14687284ed632c12fdee7db809573bf029785a7a5622f60b38a52fd88_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a447e87fb55509fce9bfcf02b5571e87d9a002e331a20614bae17076ad544d3_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a7e5a72d2f82d60918e396a8cf3a973c479752de5e07bb8bd5bdbb9b1e1019c_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:51d2ba5a66f96afc8a61c6df1a147c67ca37a1aeeb9e0a40a9b3f8af56ea01e9_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:7710bcfbeb5d4fe1dc98b9bb5cb3b99403fbcc2a680a159ba363530f48b8851d_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:4f673d88ce055610c45123bef5c31446fdb8406d1d4969a643943f246e179c84_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:a3213419c43bfccc2fc55d9dd0115e464bd2fd8fb4e5a400cc3880f65198e9e3_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:c51e88125ea5402efd4d6d445089fe17d3e7c719d6cab72538eea0791dd2663a_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:ed77f86958364fe53d8181e451581a77e242a4db791976fc7490cfcb454e589e_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:8a6027f91f12a2ad6d50b64bf21fbf97a706be0fa3c05cce44df4bc1c6795462_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d313a31a1a0adde95eac4e0860b4a928a6c9c7bf00853214aa4b9c4a9be0365_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d0433de2bbd7bb21fdee82f3a0ac2f41c87675c8d525160f6697be4f52652cb6_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:fcbe0ac15a63ac8b452b77c1900028e97b0237f946b3ecc9faf044168c5d7969_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:2df809162682b8c568979cce1bb298f116f4dc3673bb5f8af1fcbdca8e90ce79_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:64ffe5b3c536feb240530d14a507e9a99ec04b79f4035ade2714d5bca32cf77b_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:65c3ca83edd90f463d03a1df2d375f95c1e4f39e2329d565b9ae8a462153e51e_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:77c4c66043157fe503b63c347b0e67099b8e4948b8bb35dc46283aef6460c60e_ppc64le		—

Threats

Impact Important

CVE-2026-84428

A flaw was found in fastify. Due to incomplete case normalization of HTTP header names within a route's header schema, specifically within the JSON Schema Draft 7 dependencies keyword, an unauthenticated remote attacker can bypass intended conditional checks. This allows the attacker to send headers that activate privileged functionality without providing the required authentication headers, leading to an authorization bypass.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-1289 - Improper Validation of Unsafe Equivalence in Input

Affected products

Fixed 4 products, the same list as for CVE-2026-18427

Known not affected 57 products, the same list as for CVE-2026-18427

Threats

Impact Important

CVE-2026-84445

A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:11f121479a915c5f59899f6e73afeeb299e3d6d0a1f091e7e87c51a373191093_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:25a5c98d72c1bdae4d2ecfef13433afe12897b2ec86f0609908fbf850700b884_amd64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:2fc3444d7604901159a2f864dec6d59e3c2000bb7306c778591956c0a76b7ec5_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:bf49207dde3565ce593c0d276434c43e9fb9adcc950c3ccab53837e31ae27313_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:4f673d88ce055610c45123bef5c31446fdb8406d1d4969a643943f246e179c84_arm64	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:a3213419c43bfccc2fc55d9dd0115e464bd2fd8fb4e5a400cc3880f65198e9e3_s390x	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:c51e88125ea5402efd4d6d445089fe17d3e7c719d6cab72538eea0791dd2663a_ppc64le	—	Vendor Fix fix
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:ed77f86958364fe53d8181e451581a77e242a4db791976fc7490cfcb454e589e_amd64	—	Vendor Fix fix

Known not affected 53 products

Product	Identifier	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:3049a7248a4ad4d649b287aae877475deafeb7b6e1d0ecbec540f816e997b568_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:43a1bdbd4f337c81bc1a789c07d716e74a4a08f8e60374769ccd1bc202cef895_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:7e13f4dc4021d19696666d180d9d05ed4bad0ed1ae88e78562b5bbfad7adc314_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:f2c0813c6867724a82635c823a56077a8dd3b9322bcd6fcb0f4bf6dc05107a23_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:11c73dd00773e8df773a920d6b983649444630725b403720cc22f61dcbd9a88a_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:12ee43f548b9bbc51657e77500f399dfef7ef633b5e162007d627246a773981f_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:776d8fae8372638c1824a823eb5e5f9f76a1130493e979ffdeb0d5d1102b7542_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:956eeb6721b90d9024927c2afe185f9263329bd919a0ed9aa07d55d1b1deaab8_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:2e8188fdf97e15872ed626bd136071a20200791a879245ca911dcd1063b19732_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:5b0b6b676014f1c8d8ad5d6bc99aedadaf20b5846dc68c007026592541e9d29d_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:763324f7c02cc40a8217fc8daf103b5180d1be865fe8c366f877caae08ec0198_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:b72b4f747473061d4cea48ba76b318323e2d24714f020a6e7053ed641d864d76_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:01a0a766d5f13271a60cd6e2747760e4e9a741ef112fe5e9558fdc74ef2c5cff_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:169c11b438d9308b47b3ff9db32482b56581c725459393a04c3aeb2493743a8e_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:e054ba4dfbd318419796b9e604850ba3387b3485fa2e3d75e49d766e15574b42_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:fada2e23889911805c7122c6dc4571ecc4976b1a9250f2b300a532794e5499f9_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3ce6e51c799e2453155058b1e21da125f9a1d1b7107d1cc6fc27bfe4bc4c6ce7_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1cb02a116a4e4ced10ce72ce7e33a8561bebbc3a193d9cfc9105ef02ae460486_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:3b26b0470955d4675172239466f4fb5c92a44b85eb830270bd8b7f6a1bb5b784_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:7ce60bc263471d3726dbbb6edfac0c2a4b58d23adb414f63f604440ba783fce5_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:fc9d7862ed6b0ce5ffe92cdaaee509b2ae161992b8f9bdfdb6865ccb04327d35_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:4a7c40e705dd0b17f4f91f29479b0818ed138e0442a65daa3292f5663dbfc52c_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:694b88929ec77e63de90cd3dcb9f3e0899182f430c973d2b1367a2bec83e8b2f_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acbe8a4b057e7e659e3d421634e9115b49a9a244e6c46a96e0f131a11cae167c_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acc41ca9440443de6018641e9d8c37a31fe32ab4e6747edd022cb8ed63d5bb0f_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0c38a05e03b0b4bcd6156c3c43667436cb2b31b41ea6c1a806ce062c4b051b1f_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:1723204012943c8844d04645d564955d20cd22c720f06f33e7f86181454fea55_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:2dcc79c07726598b1c8a6b398d2da30503a3dae96e640963eb2b18a85a7dd7b2_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8b784c0c62cbbc470c624f08b145a02a5054216398cf7d3554400a9ff926b7ed_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3e128932a688e7db59a8057bf9c2e84f01004143aaef5f8f8ee4cdfd33d90cfb_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3fa328a585adc80b2870d2841d3db177745c6b29605c69fb077f15cb49c63ba8_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:82ca34ecce0f6b9de413147167c5a2faec1f98b409c21a6fe7d00a56a1fef1f1_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f0d13754868e1f1d08523c2459e1f0a8b7c937e27da82b19b0f1ae73f989384d_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:0a5e6487fec86246ba15b38a6a3651c5cd9316d25044a3c2bdf5572d1ce5a00b_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:5cbe66e31707a799600e2927d127666f1a1a9ac69e31da0efa4aed0191bacb06_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bd9a950cc2a62fab1ce027a744868213c0dac138d46c37daa099a87121b17163_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c73227f14687284ed632c12fdee7db809573bf029785a7a5622f60b38a52fd88_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:46fb8a7bcf2378cb7ed3f6d1d9a8fd126d0a6b5eea6aad190d533d292b6fa5a2_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:47078d49a8f53c974e220017c77c1421421d73611ecd92303105812659106737_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:536a091643cba26882ea90dfb58582a2ecf6424b4bf763da3a678ae2c586bd0f_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9f9f8ac5d0856e701c31912eaadba138b681a20f22d733254b82245ff7a8930c_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a447e87fb55509fce9bfcf02b5571e87d9a002e331a20614bae17076ad544d3_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a7e5a72d2f82d60918e396a8cf3a973c479752de5e07bb8bd5bdbb9b1e1019c_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:51d2ba5a66f96afc8a61c6df1a147c67ca37a1aeeb9e0a40a9b3f8af56ea01e9_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:7710bcfbeb5d4fe1dc98b9bb5cb3b99403fbcc2a680a159ba363530f48b8851d_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:8a6027f91f12a2ad6d50b64bf21fbf97a706be0fa3c05cce44df4bc1c6795462_ppc64le		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d313a31a1a0adde95eac4e0860b4a928a6c9c7bf00853214aa4b9c4a9be0365_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d0433de2bbd7bb21fdee82f3a0ac2f41c87675c8d525160f6697be4f52652cb6_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:fcbe0ac15a63ac8b452b77c1900028e97b0237f946b3ecc9faf044168c5d7969_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:2df809162682b8c568979cce1bb298f116f4dc3673bb5f8af1fcbdca8e90ce79_s390x		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:64ffe5b3c536feb240530d14a507e9a99ec04b79f4035ade2714d5bca32cf77b_arm64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:65c3ca83edd90f463d03a1df2d375f95c1e4f39e2329d565b9ae8a462153e51e_amd64		—
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:77c4c66043157fe503b63c347b0e67099b8e4948b8bb35dc46283aef6460c60e_ppc64le		—

Threats

Impact Important

CVE-2026-84469

A flaw was found in fastify. An unauthenticated remote attacker can bypass request validation by exploiting how fastify processes boolean false schemas. When an application intends to deny all input by assigning 'false' to a route's schema, fastify incorrectly treats it as a missing schema and fails to compile a validator. This allows the attacker to reach handlers that should be unreachable, leading to unauthorized state changes or the execution of disabled operations.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-1287 - Improper Validation of Specified Type of Input

Affected products

Fixed 4 products, the same list as for CVE-2026-18427

Known not affected 57 products, the same list as for CVE-2026-18427

Threats

Impact Important

CVE-2026-84504

A flaw was found in fastify. An authenticated low-privilege caller can exploit a vulnerability where the framework incorrectly processes the result of an Ajv asynchronous (async) validator. If a request body contains a root-level property named 'value', fastify replaces the entire request body with this property's content, bypassing the intended schema validation. This can lead to unauthorized state changes and the disclosure of sensitive data, as the application handler receives an unvalidated object.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

CWE-179 - Incorrect Behavior Order: Early Validation

Affected products

Fixed 4 products, the same list as for CVE-2026-18427

Known not affected 57 products, the same list as for CVE-2026-18427

Threats

Impact Important

CVE-2026-84961

A flaw was found in undici's BalancedPool component. This vulnerability allows a remote attacker to bypass Transport Layer Security (TLS) certificate validation. The BalancedPool constructor incorrectly processes its options, silently discarding custom certificate validation functions. Consequently, a peer with an otherwise untrusted certificate may be accepted, potentially compromising the integrity of secure communication.

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-295 - Improper Certificate Validation

Affected products

Fixed 16 products, the same list as for CVE-2026-13697

Known not affected 45 products, the same list as for CVE-2026-13697

Threats

Impact Important

CVE-2026-85062

A flaw was found in Colord, a tool for color manipulations. A remote attacker can supply a specially crafted, oversized color string to the affected component. This can cause the processing thread to block, leading to a denial of service (DoS) for the application using Colord.

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-1333 - Inefficient Regular Expression Complexity

Affected products

Fixed 4 products, the same list as for CVE-2026-18427

Known not affected 57 products, the same list as for CVE-2026-18427

Threats

Impact Moderate

CVE-2026-85124

A flaw was found in @fastify/http-proxy. This component, designed to proxy HTTP requests, does not correctly validate incoming request paths, specifically failing to account for backslash-based dot-segments. An unauthenticated network attacker can exploit this vulnerability to bypass the proxy's path restrictions. This allows them to access internal network endpoints that should be protected, leading to the disclosure of sensitive information.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Fixed 4 products, the same list as for CVE-2026-18427

Known not affected 57 products, the same list as for CVE-2026-18427

Threats

Impact Important

CVE-2026-85152

A flaw was found in undici. When the cache or deduplicate interceptor is directly composed onto a Client or Pool, the destination origin is omitted from cache and request-deduplication keys. This allows a remote attacker to perform cross-origin cache poisoning, leading to information disclosure and potentially a full authentication bypass. An attacker could exploit this by having a trusted origin accept a malicious token, without contacting the legitimate trusted origin.

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-346 - Origin Validation Error

Affected products

Fixed 4 products, the same list as for CVE-2026-18427

Known not affected 57 products, the same list as for CVE-2026-18427

Threats

Impact Important

CVE-2026-85595

An authentication bypass vulnerability was discovered in Traefik's digestAuth middleware. When an incoming request contains a username that does not exist in the configured authentication store, the application fails to reject the request and instead evaluates the credential against an empty string secret. An unauthenticated remote attacker can exploit this flaw by generating a valid HTTP Digest Authentication header calculated using an empty secret and an arbitrary password, successfully bypassing authentication controls and gaining unauthorized access to routes protected by the digestAuth middleware.

9.1 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-305 - Authentication Bypass by Primary Weakness

Affected products

Fixed 4 products, the same list as for CVE-2026-17106

Known not affected 57 products, the same list as for CVE-2026-17106

Threats

Impact Critical

CVE-2026-85597

A flaw was found in Traefik. This vulnerability allows unauthenticated attackers to bypass client-certificate authentication. By creating conflicting Transport Layer Security (TLS) options on multi-host routers, attackers can exploit shared TLS resolution across multiple hostnames in a single router rule. This causes the strict mutual TLS (mTLS) requirement to fall back to default options, enabling access to protected backends.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-303 - Incorrect Implementation of Authentication Algorithm

Affected products

Fixed 4 products, the same list as for CVE-2026-17106

Known not affected 57 products, the same list as for CVE-2026-17106

Threats

Impact Important

CVE-2026-86063

A flaw was found in Claude Code. When installing a plugin pinned to a specific commit hash, the application does not verify that the checked-out version matches the expected Secure Hash Algorithm (SHA) identifier. A remote attacker controlling a repository can create a branch named after the reviewed commit hash, tricking the tool into installing attacker-controlled code instead of the approved version. If a user installs the plugin, this issue can lead to arbitrary code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-494 - Download of Code Without Integrity Check

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:46fb8a7bcf2378cb7ed3f6d1d9a8fd126d0a6b5eea6aad190d533d292b6fa5a2_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:47078d49a8f53c974e220017c77c1421421d73611ecd92303105812659106737_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:536a091643cba26882ea90dfb58582a2ecf6424b4bf763da3a678ae2c586bd0f_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9f9f8ac5d0856e701c31912eaadba138b681a20f22d733254b82245ff7a8930c_ppc64le	—	Vendor Fix fix Workaround

Known not affected 57 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:3049a7248a4ad4d649b287aae877475deafeb7b6e1d0ecbec540f816e997b568_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:43a1bdbd4f337c81bc1a789c07d716e74a4a08f8e60374769ccd1bc202cef895_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:7e13f4dc4021d19696666d180d9d05ed4bad0ed1ae88e78562b5bbfad7adc314_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:f2c0813c6867724a82635c823a56077a8dd3b9322bcd6fcb0f4bf6dc05107a23_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:11c73dd00773e8df773a920d6b983649444630725b403720cc22f61dcbd9a88a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:12ee43f548b9bbc51657e77500f399dfef7ef633b5e162007d627246a773981f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:776d8fae8372638c1824a823eb5e5f9f76a1130493e979ffdeb0d5d1102b7542_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:956eeb6721b90d9024927c2afe185f9263329bd919a0ed9aa07d55d1b1deaab8_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:2e8188fdf97e15872ed626bd136071a20200791a879245ca911dcd1063b19732_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:5b0b6b676014f1c8d8ad5d6bc99aedadaf20b5846dc68c007026592541e9d29d_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:763324f7c02cc40a8217fc8daf103b5180d1be865fe8c366f877caae08ec0198_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:b72b4f747473061d4cea48ba76b318323e2d24714f020a6e7053ed641d864d76_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:01a0a766d5f13271a60cd6e2747760e4e9a741ef112fe5e9558fdc74ef2c5cff_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:169c11b438d9308b47b3ff9db32482b56581c725459393a04c3aeb2493743a8e_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:e054ba4dfbd318419796b9e604850ba3387b3485fa2e3d75e49d766e15574b42_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:fada2e23889911805c7122c6dc4571ecc4976b1a9250f2b300a532794e5499f9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3ce6e51c799e2453155058b1e21da125f9a1d1b7107d1cc6fc27bfe4bc4c6ce7_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1cb02a116a4e4ced10ce72ce7e33a8561bebbc3a193d9cfc9105ef02ae460486_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:3b26b0470955d4675172239466f4fb5c92a44b85eb830270bd8b7f6a1bb5b784_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:7ce60bc263471d3726dbbb6edfac0c2a4b58d23adb414f63f604440ba783fce5_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:fc9d7862ed6b0ce5ffe92cdaaee509b2ae161992b8f9bdfdb6865ccb04327d35_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:4a7c40e705dd0b17f4f91f29479b0818ed138e0442a65daa3292f5663dbfc52c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:694b88929ec77e63de90cd3dcb9f3e0899182f430c973d2b1367a2bec83e8b2f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acbe8a4b057e7e659e3d421634e9115b49a9a244e6c46a96e0f131a11cae167c_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acc41ca9440443de6018641e9d8c37a31fe32ab4e6747edd022cb8ed63d5bb0f_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0c38a05e03b0b4bcd6156c3c43667436cb2b31b41ea6c1a806ce062c4b051b1f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:1723204012943c8844d04645d564955d20cd22c720f06f33e7f86181454fea55_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:2dcc79c07726598b1c8a6b398d2da30503a3dae96e640963eb2b18a85a7dd7b2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8b784c0c62cbbc470c624f08b145a02a5054216398cf7d3554400a9ff926b7ed_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3e128932a688e7db59a8057bf9c2e84f01004143aaef5f8f8ee4cdfd33d90cfb_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3fa328a585adc80b2870d2841d3db177745c6b29605c69fb077f15cb49c63ba8_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:82ca34ecce0f6b9de413147167c5a2faec1f98b409c21a6fe7d00a56a1fef1f1_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f0d13754868e1f1d08523c2459e1f0a8b7c937e27da82b19b0f1ae73f989384d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:11f121479a915c5f59899f6e73afeeb299e3d6d0a1f091e7e87c51a373191093_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:25a5c98d72c1bdae4d2ecfef13433afe12897b2ec86f0609908fbf850700b884_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:2fc3444d7604901159a2f864dec6d59e3c2000bb7306c778591956c0a76b7ec5_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:bf49207dde3565ce593c0d276434c43e9fb9adcc950c3ccab53837e31ae27313_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:0a5e6487fec86246ba15b38a6a3651c5cd9316d25044a3c2bdf5572d1ce5a00b_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:5cbe66e31707a799600e2927d127666f1a1a9ac69e31da0efa4aed0191bacb06_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bd9a950cc2a62fab1ce027a744868213c0dac138d46c37daa099a87121b17163_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c73227f14687284ed632c12fdee7db809573bf029785a7a5622f60b38a52fd88_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a447e87fb55509fce9bfcf02b5571e87d9a002e331a20614bae17076ad544d3_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a7e5a72d2f82d60918e396a8cf3a973c479752de5e07bb8bd5bdbb9b1e1019c_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:51d2ba5a66f96afc8a61c6df1a147c67ca37a1aeeb9e0a40a9b3f8af56ea01e9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:7710bcfbeb5d4fe1dc98b9bb5cb3b99403fbcc2a680a159ba363530f48b8851d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:4f673d88ce055610c45123bef5c31446fdb8406d1d4969a643943f246e179c84_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:a3213419c43bfccc2fc55d9dd0115e464bd2fd8fb4e5a400cc3880f65198e9e3_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:c51e88125ea5402efd4d6d445089fe17d3e7c719d6cab72538eea0791dd2663a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:ed77f86958364fe53d8181e451581a77e242a4db791976fc7490cfcb454e589e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:8a6027f91f12a2ad6d50b64bf21fbf97a706be0fa3c05cce44df4bc1c6795462_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d313a31a1a0adde95eac4e0860b4a928a6c9c7bf00853214aa4b9c4a9be0365_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d0433de2bbd7bb21fdee82f3a0ac2f41c87675c8d525160f6697be4f52652cb6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:fcbe0ac15a63ac8b452b77c1900028e97b0237f946b3ecc9faf044168c5d7969_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:2df809162682b8c568979cce1bb298f116f4dc3673bb5f8af1fcbdca8e90ce79_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:64ffe5b3c536feb240530d14a507e9a99ec04b79f4035ade2714d5bca32cf77b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:65c3ca83edd90f463d03a1df2d375f95c1e4f39e2329d565b9ae8a462153e51e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:77c4c66043157fe503b63c347b0e67099b8e4948b8bb35dc46283aef6460c60e_ppc64le	—	Workaround

Threats

Impact Important

CVE-2026-87743

A flaw was found in Quarkus HTTP security. An unauthenticated attacker can exploit a discrepancy in how paths are normalized between the security matcher and HTTP request dispatchers. This allows the attacker to craft a URL that the security matcher considers public, but which is then routed to a protected endpoint, leading to an authorization bypass and potential unauthorized access to sensitive information.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-551 - Incorrect Behavior Order: Authorization Before Parsing and Canonicalization

Affected products

Fixed 4 products, the same list as for CVE-2026-15076

Known not affected 57 products, the same list as for CVE-2026-15076

Threats

Impact Important

CVE-2026-88004

A flaw was found in Traefik, an open-source HTTP reverse proxy and load balancer. Its entrypoint defenses, designed to sanitize header names, failed to inspect request trailers. This allowed an unauthenticated client to submit malicious header names within HTTP/1.1 chunked or HTTP/2 trailers. Consequently, these unsanitized trailer values could reach backend systems, bypassing security controls and potentially leading to identity spoofing or manipulation of routing data.

6.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N

CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

Affected products

Fixed 4 products, the same list as for CVE-2026-17106

Known not affected 57 products, the same list as for CVE-2026-17106

Threats

Impact Moderate

CVE-2026-88007

A flaw in Traefik's HTTP/3 ConnContext allows unauthenticated remote attackers to bypass authentication on backends using connection-bound NTLM or Negotiate protocols. Missing service.AddTransportOnContext calls lead to shared kerberosRoundTripper transports, enabling attackers to hijack persistent victim backend connections, read victim-only data, and impersonate victims without credentials.

9.1 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-863 - Incorrect Authorization

Affected products

Fixed 4 products, the same list as for CVE-2026-17106

Known not affected 57 products, the same list as for CVE-2026-17106

Threats

Impact Critical

CVE-2026-88008

A flaw was found in Traefik, an open source HTTP reverse proxy and load balancer. A remote unauthenticated attacker can exploit this vulnerability by sending a specially crafted HTTP/2 request that includes specific upgrade headers. If the backend server accepts the upgrade, Traefik enters a raw tunnel, bypassing its security features such as authentication and access controls for subsequent HTTP/2 requests. This allows the attacker to gain unauthorized access to protected resources on the backend.

9.1 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-358 - Improperly Implemented Security Check for Standard

Affected products

Fixed 4 products, the same list as for CVE-2026-17106

Known not affected 57 products, the same list as for CVE-2026-17106

Threats

Impact Critical

CVE-2026-88009

A flaw was found in Traefik, an open source HTTP reverse proxy and load balancer. This vulnerability allows a remote attacker to bypass security controls by sending a specially crafted HTTP/1 request. The request target is incorrectly processed, leading to cross-vhost routing bypass, path-scoped authorization bypass, and access-log evasion. This can occur when the backend server interprets the opaque request target as a valid path.

8.2 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

CWE-551 - Incorrect Behavior Order: Authorization Before Parsing and Canonicalization

Affected products

Fixed 4 products, the same list as for CVE-2026-17106

Known not affected 57 products, the same list as for CVE-2026-17106

Threats

Impact Important

CVE-2026-88011

A flaw was found in Traefik, an open-source HTTP reverse proxy and load balancer. A remote attacker can exploit this vulnerability by sending a specially crafted dot-form header, such as X.Authenticated.User. Due to a discrepancy in how Go and certain backend systems (like CGI, WSGI, PHP, and NGINX) interpret these headers, the backend may consume the client's supplied value instead of the identity asserted by Traefik. This allows for identity spoofing for any header managed by Traefik, potentially leading to unauthorized access or actions.

9.1 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

Affected products

Fixed 4 products, the same list as for CVE-2026-17106

Known not affected 57 products, the same list as for CVE-2026-17106

Threats

Impact Critical

CVE-2026-88012

A flaw was found in Traefik, an open-source HTTP reverse proxy and load balancer. Its HTTP/3 entrypoints do not correctly apply read timeouts, which are intended to prevent prolonged connections. An unauthenticated client can exploit this by sending a slow request body, continuously trickling data. This allows the client to hold open a request and an upstream connection indefinitely, potentially exhausting backend connection pools and leading to a Denial of Service (DoS).

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products, the same list as for CVE-2026-17106

Known not affected 57 products, the same list as for CVE-2026-17106

Threats

Impact Important

CVE-2026-88031

A flaw was found in go.mongodb.org/mongo-driver for version < 1.17.10 and < 2.9.1. Improper handling of data query elements in the GridFS component can lead to a file identifier being misinterpreted as a query. An authenticated user can exploit this to delete all GridFS file chunks, making stored file content unreadable, resulting in a denial of service.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

CWE-1287 - Improper Validation of Specified Type of Input

Affected products

Fixed 12 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:4f673d88ce055610c45123bef5c31446fdb8406d1d4969a643943f246e179c84_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:a3213419c43bfccc2fc55d9dd0115e464bd2fd8fb4e5a400cc3880f65198e9e3_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:c51e88125ea5402efd4d6d445089fe17d3e7c719d6cab72538eea0791dd2663a_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:ed77f86958364fe53d8181e451581a77e242a4db791976fc7490cfcb454e589e_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:8a6027f91f12a2ad6d50b64bf21fbf97a706be0fa3c05cce44df4bc1c6795462_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d313a31a1a0adde95eac4e0860b4a928a6c9c7bf00853214aa4b9c4a9be0365_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d0433de2bbd7bb21fdee82f3a0ac2f41c87675c8d525160f6697be4f52652cb6_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:fcbe0ac15a63ac8b452b77c1900028e97b0237f946b3ecc9faf044168c5d7969_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:2df809162682b8c568979cce1bb298f116f4dc3673bb5f8af1fcbdca8e90ce79_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:64ffe5b3c536feb240530d14a507e9a99ec04b79f4035ade2714d5bca32cf77b_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:65c3ca83edd90f463d03a1df2d375f95c1e4f39e2329d565b9ae8a462153e51e_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:77c4c66043157fe503b63c347b0e67099b8e4948b8bb35dc46283aef6460c60e_ppc64le	—	Vendor Fix fix Workaround

Known not affected 49 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:3049a7248a4ad4d649b287aae877475deafeb7b6e1d0ecbec540f816e997b568_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:43a1bdbd4f337c81bc1a789c07d716e74a4a08f8e60374769ccd1bc202cef895_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:7e13f4dc4021d19696666d180d9d05ed4bad0ed1ae88e78562b5bbfad7adc314_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:f2c0813c6867724a82635c823a56077a8dd3b9322bcd6fcb0f4bf6dc05107a23_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:11c73dd00773e8df773a920d6b983649444630725b403720cc22f61dcbd9a88a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:12ee43f548b9bbc51657e77500f399dfef7ef633b5e162007d627246a773981f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:776d8fae8372638c1824a823eb5e5f9f76a1130493e979ffdeb0d5d1102b7542_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:956eeb6721b90d9024927c2afe185f9263329bd919a0ed9aa07d55d1b1deaab8_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:2e8188fdf97e15872ed626bd136071a20200791a879245ca911dcd1063b19732_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:5b0b6b676014f1c8d8ad5d6bc99aedadaf20b5846dc68c007026592541e9d29d_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:763324f7c02cc40a8217fc8daf103b5180d1be865fe8c366f877caae08ec0198_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:b72b4f747473061d4cea48ba76b318323e2d24714f020a6e7053ed641d864d76_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:01a0a766d5f13271a60cd6e2747760e4e9a741ef112fe5e9558fdc74ef2c5cff_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:169c11b438d9308b47b3ff9db32482b56581c725459393a04c3aeb2493743a8e_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:e054ba4dfbd318419796b9e604850ba3387b3485fa2e3d75e49d766e15574b42_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:fada2e23889911805c7122c6dc4571ecc4976b1a9250f2b300a532794e5499f9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3ce6e51c799e2453155058b1e21da125f9a1d1b7107d1cc6fc27bfe4bc4c6ce7_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1cb02a116a4e4ced10ce72ce7e33a8561bebbc3a193d9cfc9105ef02ae460486_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:3b26b0470955d4675172239466f4fb5c92a44b85eb830270bd8b7f6a1bb5b784_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:7ce60bc263471d3726dbbb6edfac0c2a4b58d23adb414f63f604440ba783fce5_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:fc9d7862ed6b0ce5ffe92cdaaee509b2ae161992b8f9bdfdb6865ccb04327d35_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:4a7c40e705dd0b17f4f91f29479b0818ed138e0442a65daa3292f5663dbfc52c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:694b88929ec77e63de90cd3dcb9f3e0899182f430c973d2b1367a2bec83e8b2f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acbe8a4b057e7e659e3d421634e9115b49a9a244e6c46a96e0f131a11cae167c_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acc41ca9440443de6018641e9d8c37a31fe32ab4e6747edd022cb8ed63d5bb0f_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0c38a05e03b0b4bcd6156c3c43667436cb2b31b41ea6c1a806ce062c4b051b1f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:1723204012943c8844d04645d564955d20cd22c720f06f33e7f86181454fea55_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:2dcc79c07726598b1c8a6b398d2da30503a3dae96e640963eb2b18a85a7dd7b2_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8b784c0c62cbbc470c624f08b145a02a5054216398cf7d3554400a9ff926b7ed_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3e128932a688e7db59a8057bf9c2e84f01004143aaef5f8f8ee4cdfd33d90cfb_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3fa328a585adc80b2870d2841d3db177745c6b29605c69fb077f15cb49c63ba8_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:82ca34ecce0f6b9de413147167c5a2faec1f98b409c21a6fe7d00a56a1fef1f1_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f0d13754868e1f1d08523c2459e1f0a8b7c937e27da82b19b0f1ae73f989384d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:11f121479a915c5f59899f6e73afeeb299e3d6d0a1f091e7e87c51a373191093_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:25a5c98d72c1bdae4d2ecfef13433afe12897b2ec86f0609908fbf850700b884_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:2fc3444d7604901159a2f864dec6d59e3c2000bb7306c778591956c0a76b7ec5_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:bf49207dde3565ce593c0d276434c43e9fb9adcc950c3ccab53837e31ae27313_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:0a5e6487fec86246ba15b38a6a3651c5cd9316d25044a3c2bdf5572d1ce5a00b_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:5cbe66e31707a799600e2927d127666f1a1a9ac69e31da0efa4aed0191bacb06_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bd9a950cc2a62fab1ce027a744868213c0dac138d46c37daa099a87121b17163_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c73227f14687284ed632c12fdee7db809573bf029785a7a5622f60b38a52fd88_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:46fb8a7bcf2378cb7ed3f6d1d9a8fd126d0a6b5eea6aad190d533d292b6fa5a2_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:47078d49a8f53c974e220017c77c1421421d73611ecd92303105812659106737_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:536a091643cba26882ea90dfb58582a2ecf6424b4bf763da3a678ae2c586bd0f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9f9f8ac5d0856e701c31912eaadba138b681a20f22d733254b82245ff7a8930c_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a447e87fb55509fce9bfcf02b5571e87d9a002e331a20614bae17076ad544d3_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a7e5a72d2f82d60918e396a8cf3a973c479752de5e07bb8bd5bdbb9b1e1019c_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:51d2ba5a66f96afc8a61c6df1a147c67ca37a1aeeb9e0a40a9b3f8af56ea01e9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:7710bcfbeb5d4fe1dc98b9bb5cb3b99403fbcc2a680a159ba363530f48b8851d_s390x	—	Workaround

Threats

Impact Important

CVE-2026-88878

A flaw was found in Traefik, an HTTP reverse proxy and load balancer. When HTTP/3 is enabled, an unauthenticated remote client can exploit a timeout bypass vulnerability by trickling request body bytes. This allows the client to hold a request open indefinitely, exhausting backend connection pools and leading to a denial of service (DoS) for legitimate users.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products, the same list as for CVE-2026-17106

Known not affected 57 products, the same list as for CVE-2026-17106

Threats

Impact Important

CVE-2026-88879

A flaw was found in Traefik, an HTTP reverse proxy and load balancer. Due to a discrepancy in how Traefik and certain backend applications process HTTP header names, a remote attacker can smuggle specially crafted headers. This allows the attacker to bypass identity assertions made by Traefik, leading to identity spoofing and potentially gaining unauthorized access or elevated privileges within the backend application.

9.6 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

Affected products

Fixed 4 products, the same list as for CVE-2026-17106

Known not affected 57 products, the same list as for CVE-2026-17106

Threats

Impact Critical

CVE-2026-90711

A flaw was found in proxy-addr. When an application defines trusted proxy subnets using IPv4-mapped IPv6 addresses with an improper prefix length, the subnet parser fails open and erroneously treats all incoming network addresses as trusted. A remote, unauthenticated attacker can exploit this vulnerability by submitting a forged X-Forwarded-For header to spoof their client IP address. This flaw allows attackers to bypass IP-based access controls, rate limiting, and audit logging.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-290 - Authentication Bypass by Spoofing

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:3049a7248a4ad4d649b287aae877475deafeb7b6e1d0ecbec540f816e997b568_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:43a1bdbd4f337c81bc1a789c07d716e74a4a08f8e60374769ccd1bc202cef895_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:7e13f4dc4021d19696666d180d9d05ed4bad0ed1ae88e78562b5bbfad7adc314_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-rhel9@sha256:f2c0813c6867724a82635c823a56077a8dd3b9322bcd6fcb0f4bf6dc05107a23_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:0c38a05e03b0b4bcd6156c3c43667436cb2b31b41ea6c1a806ce062c4b051b1f_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:1723204012943c8844d04645d564955d20cd22c720f06f33e7f86181454fea55_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:2dcc79c07726598b1c8a6b398d2da30503a3dae96e640963eb2b18a85a7dd7b2_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:8b784c0c62cbbc470c624f08b145a02a5054216398cf7d3554400a9ff926b7ed_amd64	—	Vendor Fix fix Workaround

Known not affected 53 products

Product	Version	Remediation
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:11c73dd00773e8df773a920d6b983649444630725b403720cc22f61dcbd9a88a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:12ee43f548b9bbc51657e77500f399dfef7ef633b5e162007d627246a773981f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:776d8fae8372638c1824a823eb5e5f9f76a1130493e979ffdeb0d5d1102b7542_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:956eeb6721b90d9024927c2afe185f9263329bd919a0ed9aa07d55d1b1deaab8_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:2e8188fdf97e15872ed626bd136071a20200791a879245ca911dcd1063b19732_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:5b0b6b676014f1c8d8ad5d6bc99aedadaf20b5846dc68c007026592541e9d29d_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:763324f7c02cc40a8217fc8daf103b5180d1be865fe8c366f877caae08ec0198_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/configbump-rhel9@sha256:b72b4f747473061d4cea48ba76b318323e2d24714f020a6e7053ed641d864d76_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:01a0a766d5f13271a60cd6e2747760e4e9a741ef112fe5e9558fdc74ef2c5cff_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:169c11b438d9308b47b3ff9db32482b56581c725459393a04c3aeb2493743a8e_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:e054ba4dfbd318419796b9e604850ba3387b3485fa2e3d75e49d766e15574b42_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/dashboard-rhel9@sha256:fada2e23889911805c7122c6dc4571ecc4976b1a9250f2b300a532794e5499f9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:3ce6e51c799e2453155058b1e21da125f9a1d1b7107d1cc6fc27bfe4bc4c6ce7_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1cb02a116a4e4ced10ce72ce7e33a8561bebbc3a193d9cfc9105ef02ae460486_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:3b26b0470955d4675172239466f4fb5c92a44b85eb830270bd8b7f6a1bb5b784_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:7ce60bc263471d3726dbbb6edfac0c2a4b58d23adb414f63f604440ba783fce5_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:fc9d7862ed6b0ce5ffe92cdaaee509b2ae161992b8f9bdfdb6865ccb04327d35_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:4a7c40e705dd0b17f4f91f29479b0818ed138e0442a65daa3292f5663dbfc52c_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:694b88929ec77e63de90cd3dcb9f3e0899182f430c973d2b1367a2bec83e8b2f_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acbe8a4b057e7e659e3d421634e9115b49a9a244e6c46a96e0f131a11cae167c_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:acc41ca9440443de6018641e9d8c37a31fe32ab4e6747edd022cb8ed63d5bb0f_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3e128932a688e7db59a8057bf9c2e84f01004143aaef5f8f8ee4cdfd33d90cfb_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:3fa328a585adc80b2870d2841d3db177745c6b29605c69fb077f15cb49c63ba8_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:82ca34ecce0f6b9de413147167c5a2faec1f98b409c21a6fe7d00a56a1fef1f1_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:f0d13754868e1f1d08523c2459e1f0a8b7c937e27da82b19b0f1ae73f989384d_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:11f121479a915c5f59899f6e73afeeb299e3d6d0a1f091e7e87c51a373191093_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:25a5c98d72c1bdae4d2ecfef13433afe12897b2ec86f0609908fbf850700b884_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:2fc3444d7604901159a2f864dec6d59e3c2000bb7306c778591956c0a76b7ec5_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/oauth2-proxy-rhel9@sha256:bf49207dde3565ce593c0d276434c43e9fb9adcc950c3ccab53837e31ae27313_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:0a5e6487fec86246ba15b38a6a3651c5cd9316d25044a3c2bdf5572d1ce5a00b_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:5cbe66e31707a799600e2927d127666f1a1a9ac69e31da0efa4aed0191bacb06_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bd9a950cc2a62fab1ce027a744868213c0dac138d46c37daa099a87121b17163_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/openvsx-rhel9@sha256:c73227f14687284ed632c12fdee7db809573bf029785a7a5622f60b38a52fd88_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:46fb8a7bcf2378cb7ed3f6d1d9a8fd126d0a6b5eea6aad190d533d292b6fa5a2_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:47078d49a8f53c974e220017c77c1421421d73611ecd92303105812659106737_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:536a091643cba26882ea90dfb58582a2ecf6424b4bf763da3a678ae2c586bd0f_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:9f9f8ac5d0856e701c31912eaadba138b681a20f22d733254b82245ff7a8930c_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a447e87fb55509fce9bfcf02b5571e87d9a002e331a20614bae17076ad544d3_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:0a7e5a72d2f82d60918e396a8cf3a973c479752de5e07bb8bd5bdbb9b1e1019c_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:51d2ba5a66f96afc8a61c6df1a147c67ca37a1aeeb9e0a40a9b3f8af56ea01e9_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/server-rhel9@sha256:7710bcfbeb5d4fe1dc98b9bb5cb3b99403fbcc2a680a159ba363530f48b8851d_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:4f673d88ce055610c45123bef5c31446fdb8406d1d4969a643943f246e179c84_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:a3213419c43bfccc2fc55d9dd0115e464bd2fd8fb4e5a400cc3880f65198e9e3_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:c51e88125ea5402efd4d6d445089fe17d3e7c719d6cab72538eea0791dd2663a_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/traefik-rhel9@sha256:ed77f86958364fe53d8181e451581a77e242a4db791976fc7490cfcb454e589e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:8a6027f91f12a2ad6d50b64bf21fbf97a706be0fa3c05cce44df4bc1c6795462_ppc64le	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d313a31a1a0adde95eac4e0860b4a928a6c9c7bf00853214aa4b9c4a9be0365_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:d0433de2bbd7bb21fdee82f3a0ac2f41c87675c8d525160f6697be4f52652cb6_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-base-rhel9@sha256:fcbe0ac15a63ac8b452b77c1900028e97b0237f946b3ecc9faf044168c5d7969_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:2df809162682b8c568979cce1bb298f116f4dc3673bb5f8af1fcbdca8e90ce79_s390x	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:64ffe5b3c536feb240530d14a507e9a99ec04b79f4035ade2714d5bca32cf77b_arm64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:65c3ca83edd90f463d03a1df2d375f95c1e4f39e2329d565b9ae8a462153e51e_amd64	—	Workaround
Unresolved product id: Red Hat OpenShift Dev Spaces 3.31:registry.redhat.io/devspaces/udi-rhel9@sha256:77c4c66043157fe503b63c347b0e67099b8e4948b8bb35dc46283aef6460c60e_ppc64le	—	Workaround

Threats

Impact Important

CVE-2026-93749

A flaw was found in source-map-js. This vulnerability allows a remote attacker to trigger a denial of service by providing malformed input. Specifically, by supplying extremely large offset line values in indexed source maps, the attacker can cause the service's event loop to block, making it unable to process further requests.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1285 - Improper Validation of Specified Index, Position, or Offset in Input

Affected products

Fixed 4 products, the same list as for CVE-2023-54404

Known not affected 57 products, the same list as for CVE-2023-54404

Threats

Impact Important

CVE-2026-100655

A flaw was found in Netty. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by exhausting server memory. Because the SPDY session handler does not restrict the number of concurrent streams initiated by a remote peer, an attacker can transmit an excessive volume of stream creation requests over a connection, triggering memory exhaustion and crashing the application.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 8 products, the same list as for CVE-2026-55831

Known not affected 53 products, the same list as for CVE-2026-55831

Threats

Impact Important

CVE-2026-100656

A flaw was found in Netty. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by sending numerous pipelined HTTP/1.1 requests over a single connection while withholding reads. Netty's HTTP server codec stores unanswered requests in an internal queue without a size limit, leading to excessive memory consumption and an eventual application crash.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 8 products, the same list as for CVE-2026-55831

Known not affected 53 products, the same list as for CVE-2026-55831

Threats

Impact Important

CVE-2026-100666

A flaw was found in Netty's HttpServerCodec. A remote attacker can exploit this vulnerability to cause HTTP response desynchronization, leading to response splitting and potential information disclosure. By sending pipelined requests with informational headers followed by another request, the server misaligns outbound responses with queued inbound requests. Consequently, response data can be associated with the wrong request on reused connections, leading to the delivery of unintended content.

7.3 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

Affected products

Fixed 20 products, the same list as for CVE-2026-62243

Known not affected 41 products, the same list as for CVE-2026-62243

Threats

Impact Important

CVE-2026-101916

A flaw was found in grpc-js. In configurations where client certificates are optional, the authentication context lookup fails to distinguish between authorized and unauthorized peer certificates. A remote attacker can exploit this vulnerability by presenting an untrusted certificate, allowing them to bypass authentication mechanisms and access protected services.

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-295 - Improper Certificate Validation

Affected products

Fixed 4 products, the same list as for CVE-2023-54404

Known not affected 57 products, the same list as for CVE-2023-54404

Threats

Impact Important

CVE-2026-102925

A flaw was found in virtualenv. The generated activation scripts for shells such as bash, zsh, and fish apply improper quoting to environment and library path variables. An attacker can exploit this by providing a crafted virtual environment path containing shell metacharacters. When an unsuspecting user sources the activation script, the embedded metacharacters are executed as shell commands, leading to arbitrary code execution with the privileges of that user.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Affected products

Fixed 4 products, the same list as for CVE-2026-8643

Known not affected 57 products, the same list as for CVE-2026-8643

Threats

Impact Important

CVE-2026-102930

A flaw was found in virtualenv. When fetching seed packages such as pip or setuptools during environment creation or updates, virtualenv does not verify the integrity of downloaded files against authoritative cryptographic checksums. A network attacker or compromised mirror could substitute malicious packages under expected filenames. If virtualenv caches and installs these tampered packages into subsequent environments, an attacker can achieve arbitrary code execution.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-494 - Download of Code Without Integrity Check

Affected products

Fixed 4 products, the same list as for CVE-2026-8643

Known not affected 57 products, the same list as for CVE-2026-8643

Threats

Impact Important

CVE-2026-103435

A flaw was found in claude-code. An attacker with write access to a shared workspace can achieve arbitrary file modification and privilege escalation by exploiting a time-of-check to time-of-use (TOCTOU) race condition. By replacing a project file with a symbolic link between the permission check and the write operation, an attacker can bypass workspace restrictions and overwrite sensitive files outside the project sandbox.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition

Affected products

Fixed 4 products, the same list as for CVE-2026-86063

Known not affected 57 products, the same list as for CVE-2026-86063

Threats

Impact Moderate

CVE-2026-109618

A flaw was found in PHP's memory limit handling during request parsing. PHP records certain state as ready for use before all required memory allocations complete. If an allocation fails due to memory exhaustion, the incomplete state is not rolled back. Subsequent cleanup operations treat the uninitialized memory as valid, leading to memory corruption. An unauthenticated attacker can exploit this via crafted HTTP requests to achieve remote code execution against mod_php with default configuration, and against FPM through application-stage paths.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 4 products, the same list as for CVE-2026-8643

Known not affected 57 products, the same list as for CVE-2026-8643

Threats

Exploit Status CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Impact Moderate

CVE-2026-109619

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is reset. If PHP catches the failure and continues cleanup, or reuses the persistent worker for a subsequent request, a later operation may act on the stale state after its underlying memory has been released. An unauthenticated attacker can exploit this to achieve use-after-free and remote code execution against mod_php. FPM is conditionally affected through application-stage paths.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 4 products, the same list as for CVE-2026-8643

Known not affected 57 products, the same list as for CVE-2026-8643

Threats

Exploit Status CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Impact Moderate

References

774 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:90321	self
https://access.redhat.com/documentation/en-us/red…	external
https://access.redhat.com/security/cve/CVE-2023-54404	external
https://access.redhat.com/security/cve/CVE-2025-62718	external
https://access.redhat.com/security/cve/CVE-2026-100655	external
https://access.redhat.com/security/cve/CVE-2026-100656	external
https://access.redhat.com/security/cve/CVE-2026-100666	external
https://access.redhat.com/security/cve/CVE-2026-101916	external
https://access.redhat.com/security/cve/CVE-2026-102925	external
https://access.redhat.com/security/cve/CVE-2026-102930	external
https://access.redhat.com/security/cve/CVE-2026-103435	external
https://access.redhat.com/security/cve/CVE-2026-109618	external
https://access.redhat.com/security/cve/CVE-2026-109619	external
https://access.redhat.com/security/cve/CVE-2026-12185	external
https://access.redhat.com/security/cve/CVE-2026-13697	external
https://access.redhat.com/security/cve/CVE-2026-14682	external
https://access.redhat.com/security/cve/CVE-2026-15076	external
https://access.redhat.com/security/cve/CVE-2026-16308	external
https://access.redhat.com/security/cve/CVE-2026-17106	external
https://access.redhat.com/security/cve/CVE-2026-18427	external
https://access.redhat.com/security/cve/CVE-2026-19203	external
https://access.redhat.com/security/cve/CVE-2026-19534	external
https://access.redhat.com/security/cve/CVE-2026-39820	external
https://access.redhat.com/security/cve/CVE-2026-41178	external
https://access.redhat.com/security/cve/CVE-2026-41707	external
https://access.redhat.com/security/cve/CVE-2026-42499	external
https://access.redhat.com/security/cve/CVE-2026-42502	external
https://access.redhat.com/security/cve/CVE-2026-45416	external
https://access.redhat.com/security/cve/CVE-2026-47884	external
https://access.redhat.com/security/cve/CVE-2026-47886	external
https://access.redhat.com/security/cve/CVE-2026-47888	external
https://access.redhat.com/security/cve/CVE-2026-47890	external
https://access.redhat.com/security/cve/CVE-2026-47892	external
https://access.redhat.com/security/cve/CVE-2026-50010	external
https://access.redhat.com/security/cve/CVE-2026-55831	external
https://access.redhat.com/security/cve/CVE-2026-55833	external
https://access.redhat.com/security/cve/CVE-2026-55851	external
https://access.redhat.com/security/cve/CVE-2026-56745	external
https://access.redhat.com/security/cve/CVE-2026-56746	external
https://access.redhat.com/security/cve/CVE-2026-56819	external
https://access.redhat.com/security/cve/CVE-2026-56852	external
https://access.redhat.com/security/cve/CVE-2026-56854	external
https://access.redhat.com/security/cve/CVE-2026-58062	external
https://access.redhat.com/security/cve/CVE-2026-59280	external
https://access.redhat.com/security/cve/CVE-2026-59282	external
https://access.redhat.com/security/cve/CVE-2026-59283	external
https://access.redhat.com/security/cve/CVE-2026-59296	external
https://access.redhat.com/security/cve/CVE-2026-59313	external
https://access.redhat.com/security/cve/CVE-2026-59323	external
https://access.redhat.com/security/cve/CVE-2026-59651	external
https://access.redhat.com/security/cve/CVE-2026-59887	external
https://access.redhat.com/security/cve/CVE-2026-59899	external
https://access.redhat.com/security/cve/CVE-2026-59901	external
https://access.redhat.com/security/cve/CVE-2026-62243	external
https://access.redhat.com/security/cve/CVE-2026-64607	external
https://access.redhat.com/security/cve/CVE-2026-67213	external
https://access.redhat.com/security/cve/CVE-2026-67312	external
https://access.redhat.com/security/cve/CVE-2026-67313	external
https://access.redhat.com/security/cve/CVE-2026-67314	external
https://access.redhat.com/security/cve/CVE-2026-67320	external
https://access.redhat.com/security/cve/CVE-2026-67321	external
https://access.redhat.com/security/cve/CVE-2026-68494	external
https://access.redhat.com/security/cve/CVE-2026-68497	external
https://access.redhat.com/security/cve/CVE-2026-69152	external
https://access.redhat.com/security/cve/CVE-2026-69192	external
https://access.redhat.com/security/cve/CVE-2026-71290	external
https://access.redhat.com/security/cve/CVE-2026-71324	external
https://access.redhat.com/security/cve/CVE-2026-71325	external
https://access.redhat.com/security/cve/CVE-2026-71327	external
https://access.redhat.com/security/cve/CVE-2026-73500	external
https://access.redhat.com/security/cve/CVE-2026-73508	external
https://access.redhat.com/security/cve/CVE-2026-74835	external
https://access.redhat.com/security/cve/CVE-2026-75838	external
https://access.redhat.com/security/cve/CVE-2026-75899	external
https://access.redhat.com/security/cve/CVE-2026-75931	external
https://access.redhat.com/security/cve/CVE-2026-76169	external
https://access.redhat.com/security/cve/CVE-2026-81521	external
https://access.redhat.com/security/cve/CVE-2026-82417	external
https://access.redhat.com/security/cve/CVE-2026-82562	external
https://access.redhat.com/security/cve/CVE-2026-84292	external
https://access.redhat.com/security/cve/CVE-2026-84375	external
https://access.redhat.com/security/cve/CVE-2026-84394	external
https://access.redhat.com/security/cve/CVE-2026-84428	external
https://access.redhat.com/security/cve/CVE-2026-84445	external
https://access.redhat.com/security/cve/CVE-2026-84469	external
https://access.redhat.com/security/cve/CVE-2026-84504	external
https://access.redhat.com/security/cve/CVE-2026-84961	external
https://access.redhat.com/security/cve/CVE-2026-85062	external
https://access.redhat.com/security/cve/CVE-2026-85124	external
https://access.redhat.com/security/cve/CVE-2026-85152	external
https://access.redhat.com/security/cve/CVE-2026-85595	external
https://access.redhat.com/security/cve/CVE-2026-85597	external
https://access.redhat.com/security/cve/CVE-2026-86063	external
https://access.redhat.com/security/cve/CVE-2026-8643	external
https://access.redhat.com/security/cve/CVE-2026-87743	external
https://access.redhat.com/security/cve/CVE-2026-88004	external
https://access.redhat.com/security/cve/CVE-2026-88007	external
https://access.redhat.com/security/cve/CVE-2026-88008	external
https://access.redhat.com/security/cve/CVE-2026-88009	external
https://access.redhat.com/security/cve/CVE-2026-88011	external
https://access.redhat.com/security/cve/CVE-2026-88012	external
https://access.redhat.com/security/cve/CVE-2026-88031	external
https://access.redhat.com/security/cve/CVE-2026-88878	external
https://access.redhat.com/security/cve/CVE-2026-88879	external
https://access.redhat.com/security/cve/CVE-2026-90711	external
https://access.redhat.com/security/cve/CVE-2026-93749	external
https://access.redhat.com/security/cve/CVE-2026-9496	external
https://access.redhat.com/security/updates/classi…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2023-54404	self
https://bugzilla.redhat.com/show_bug.cgi?id=2544881	external
https://www.cve.org/CVERecord?id=CVE-2023-54404	external
https://nvd.nist.gov/vuln/detail/CVE-2023-54404	external
https://github.com/colinhacks/zod/issues/1872	external
https://github.com/colinhacks/zod/pull/6475	external
https://www.vulncheck.com/advisories/zod-uncontro…	external
https://access.redhat.com/security/cve/CVE-2025-62718	self
https://bugzilla.redhat.com/show_bug.cgi?id=2456913	external
https://www.cve.org/CVERecord?id=CVE-2025-62718	external
https://nvd.nist.gov/vuln/detail/CVE-2025-62718	external
https://datatracker.ietf.org/doc/html/rfc1034#sec…	external
https://datatracker.ietf.org/doc/html/rfc3986#sec…	external
https://github.com/axios/axios/commit/fb3befb6daa…	external
https://github.com/axios/axios/pull/10661	external
https://github.com/axios/axios/releases/tag/v1.15.0	external
https://github.com/axios/axios/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-8643	self
https://bugzilla.redhat.com/show_bug.cgi?id=2460927	external
https://www.cve.org/CVERecord?id=CVE-2026-8643	external
https://nvd.nist.gov/vuln/detail/CVE-2026-8643	external
https://github.com/pypa/pip/commit/8eb178480bd1a2…	external
https://access.redhat.com/security/cve/CVE-2026-9496	self
https://bugzilla.redhat.com/show_bug.cgi?id=2481394	external
https://www.cve.org/CVERecord?id=CVE-2026-9496	external
https://nvd.nist.gov/vuln/detail/CVE-2026-9496	external
https://github.com/npm/pacote/blob/9d7459440826ab…	external
https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJAR…	external
https://security.snyk.io/vuln/SNYK-JS-PACOTE-8225084	external
https://access.redhat.com/security/cve/CVE-2026-12185	self
https://bugzilla.redhat.com/show_bug.cgi?id=2510202	external
https://www.cve.org/CVERecord?id=CVE-2026-12185	external
https://nvd.nist.gov/vuln/detail/CVE-2026-12185	external
https://github.com/bcgit/bc-java/commit/7bbd7fe5f…	external
https://github.com/bcgit/bc-java/wiki/CVE-2026-12185	external
https://access.redhat.com/security/cve/CVE-2026-13697	self
https://bugzilla.redhat.com/show_bug.cgi?id=2508485	external
https://www.cve.org/CVERecord?id=CVE-2026-13697	external
https://nvd.nist.gov/vuln/detail/CVE-2026-13697	external
https://cna.openjsf.org/security-advisories.html	external
https://github.com/nodejs/undici/security/advisor…	external
https://access.redhat.com/security/cve/CVE-2026-14682	self
https://bugzilla.redhat.com/show_bug.cgi?id=2510258	external
https://www.cve.org/CVERecord?id=CVE-2026-14682	external
https://nvd.nist.gov/vuln/detail/CVE-2026-14682	external
https://github.com/bcgit/bc-java/commit/37094e504…	external
https://github.com/bcgit/bc-java/wiki/CVE-2026-14682	external
https://access.redhat.com/security/cve/CVE-2026-15076	self
https://bugzilla.redhat.com/show_bug.cgi?id=2499914	external
https://www.cve.org/CVERecord?id=CVE-2026-15076	external
https://nvd.nist.gov/vuln/detail/CVE-2026-15076	external
https://gitlab.eclipse.org/security/cve-assignmen…	external
https://access.redhat.com/security/cve/CVE-2026-16308	self
https://bugzilla.redhat.com/show_bug.cgi?id=2506373	external
https://www.cve.org/CVERecord?id=CVE-2026-16308	external
https://nvd.nist.gov/vuln/detail/CVE-2026-16308	external
https://access.redhat.com/security/cve/CVE-2026-17106	self
https://bugzilla.redhat.com/show_bug.cgi?id=2518147	external
https://www.cve.org/CVERecord?id=CVE-2026-17106	external
https://nvd.nist.gov/vuln/detail/CVE-2026-17106	external
https://docs.docker.com/desktop/release-notes/#4860	external
https://docs.docker.com/engine/release-notes/29/#2970	external
https://github.com/docker/cli/releases/tag/v29.7.0	external
https://github.com/docker/compose/releases/tag/v5.4.0	external
https://github.com/docker/sbx-releases/releases/t…	external
https://github.com/moby/go-archive/releases/tag/v0.3.0	external
https://github.com/moby/go-archive/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-18427	self
https://bugzilla.redhat.com/show_bug.cgi?id=2512116	external
https://www.cve.org/CVERecord?id=CVE-2026-18427	external
https://nvd.nist.gov/vuln/detail/CVE-2026-18427	external
https://github.com/fastify/fastify-static/securit…	external
https://access.redhat.com/security/cve/CVE-2026-19203	self
https://bugzilla.redhat.com/show_bug.cgi?id=2529768	external
https://www.cve.org/CVERecord?id=CVE-2026-19203	external
https://nvd.nist.gov/vuln/detail/CVE-2026-19203	external
https://github.com/jetty/jetty.project/security/a…	external
https://access.redhat.com/security/cve/CVE-2026-19534	self
https://bugzilla.redhat.com/show_bug.cgi?id=2528759	external
https://www.cve.org/CVERecord?id=CVE-2026-19534	external
https://nvd.nist.gov/vuln/detail/CVE-2026-19534	external
https://github.com/nodejs/undici/security/advisor…	external
https://access.redhat.com/security/cve/CVE-2026-39820	self
https://bugzilla.redhat.com/show_bug.cgi?id=2467820	external
https://www.cve.org/CVERecord?id=CVE-2026-39820	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39820	external
https://go.dev/cl/759940	external
https://go.dev/issue/78566	external
https://groups.google.com/g/golang-announce/c/qcC…	external
https://pkg.go.dev/vuln/GO-2026-4986	external
https://access.redhat.com/security/cve/CVE-2026-41178	self
https://bugzilla.redhat.com/show_bug.cgi?id=2484830	external
https://www.cve.org/CVERecord?id=CVE-2026-41178	external
https://nvd.nist.gov/vuln/detail/CVE-2026-41178	external
https://github.com/open-telemetry/opentelemetry-g…	external
https://github.com/open-telemetry/opentelemetry-g…	external
https://access.redhat.com/security/cve/CVE-2026-41707	self
https://bugzilla.redhat.com/show_bug.cgi?id=2524189	external
https://www.cve.org/CVERecord?id=CVE-2026-41707	external
https://nvd.nist.gov/vuln/detail/CVE-2026-41707	external
https://spring.io/security/cve-2026-41707	external
https://access.redhat.com/security/cve/CVE-2026-42499	self
https://bugzilla.redhat.com/show_bug.cgi?id=2467809	external
https://www.cve.org/CVERecord?id=CVE-2026-42499	external
https://nvd.nist.gov/vuln/detail/CVE-2026-42499	external
https://go.dev/cl/771520	external
https://go.dev/issue/78987	external
https://pkg.go.dev/vuln/GO-2026-4977	external
https://access.redhat.com/security/cve/CVE-2026-42502	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480762	external
https://www.cve.org/CVERecord?id=CVE-2026-42502	external
https://nvd.nist.gov/vuln/detail/CVE-2026-42502	external
https://go.dev/cl/781701	external
https://go.dev/issue/79572	external
https://groups.google.com/g/golang-announce/c/iI-…	external
https://pkg.go.dev/vuln/GO-2026-5027	external
https://access.redhat.com/security/cve/CVE-2026-45416	self
https://bugzilla.redhat.com/show_bug.cgi?id=2488391	external
https://www.cve.org/CVERecord?id=CVE-2026-45416	external
https://nvd.nist.gov/vuln/detail/CVE-2026-45416	external
https://github.com/netty/netty/releases/tag/netty…	external
https://github.com/netty/netty/releases/tag/netty…	external
https://github.com/netty/netty/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-47884	self
https://bugzilla.redhat.com/show_bug.cgi?id=2524858	external
https://www.cve.org/CVERecord?id=CVE-2026-47884	external
https://nvd.nist.gov/vuln/detail/CVE-2026-47884	external
https://spring.io/security/cve-2026-47884	external
https://access.redhat.com/security/cve/CVE-2026-47886	self
https://bugzilla.redhat.com/show_bug.cgi?id=2524864	external
https://www.cve.org/CVERecord?id=CVE-2026-47886	external
https://nvd.nist.gov/vuln/detail/CVE-2026-47886	external
https://spring.io/security/cve-2026-47886	external
https://access.redhat.com/security/cve/CVE-2026-47888	self
https://bugzilla.redhat.com/show_bug.cgi?id=2524860	external
https://www.cve.org/CVERecord?id=CVE-2026-47888	external
https://nvd.nist.gov/vuln/detail/CVE-2026-47888	external
https://spring.io/security/cve-2026-47888	external
https://access.redhat.com/security/cve/CVE-2026-47890	self
https://bugzilla.redhat.com/show_bug.cgi?id=2524850	external
https://www.cve.org/CVERecord?id=CVE-2026-47890	external
https://nvd.nist.gov/vuln/detail/CVE-2026-47890	external
https://spring.io/security/cve-2026-47890	external
https://access.redhat.com/security/cve/CVE-2026-47892	self
https://bugzilla.redhat.com/show_bug.cgi?id=2524846	external
https://www.cve.org/CVERecord?id=CVE-2026-47892	external
https://nvd.nist.gov/vuln/detail/CVE-2026-47892	external
https://spring.io/security/cve-2026-47892	external
https://access.redhat.com/security/cve/CVE-2026-50010	self
https://bugzilla.redhat.com/show_bug.cgi?id=2488429	external
https://www.cve.org/CVERecord?id=CVE-2026-50010	external
https://nvd.nist.gov/vuln/detail/CVE-2026-50010	external
https://github.com/netty/netty/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-55831	self
https://bugzilla.redhat.com/show_bug.cgi?id=2503103	external
https://www.cve.org/CVERecord?id=CVE-2026-55831	external
https://nvd.nist.gov/vuln/detail/CVE-2026-55831	external
https://github.com/netty/netty/commit/5b68c61f37a…	external
https://github.com/netty/netty/commit/bb2ff68a1fb…	external
https://github.com/netty/netty/releases/tag/netty…	external
https://github.com/netty/netty/releases/tag/netty…	external
https://github.com/netty/netty/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-55833	self
https://bugzilla.redhat.com/show_bug.cgi?id=2503101	external
https://www.cve.org/CVERecord?id=CVE-2026-55833	external
https://nvd.nist.gov/vuln/detail/CVE-2026-55833	external
https://github.com/netty/netty/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-55851	self
https://bugzilla.redhat.com/show_bug.cgi?id=2505698	external
https://www.cve.org/CVERecord?id=CVE-2026-55851	external
https://nvd.nist.gov/vuln/detail/CVE-2026-55851	external
https://github.com/netty/netty/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-56745	self
https://bugzilla.redhat.com/show_bug.cgi?id=2505911	external
https://www.cve.org/CVERecord?id=CVE-2026-56745	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56745	external
https://github.com/netty/netty/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-56746	self
https://bugzilla.redhat.com/show_bug.cgi?id=2505422	external
https://www.cve.org/CVERecord?id=CVE-2026-56746	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56746	external
https://github.com/netty/netty/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-56819	self
https://bugzilla.redhat.com/show_bug.cgi?id=2505980	external
https://www.cve.org/CVERecord?id=CVE-2026-56819	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56819	external
https://github.com/netty/netty/commit/5b68c61f37a…	external
https://github.com/netty/netty/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-56852	self
https://bugzilla.redhat.com/show_bug.cgi?id=2504233	external
https://www.cve.org/CVERecord?id=CVE-2026-56852	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56852	external
https://go.dev/cl/794100	external
https://go.dev/issue/80142	external
https://pkg.go.dev/vuln/GO-2026-5970	external
https://access.redhat.com/security/cve/CVE-2026-56854	self
https://bugzilla.redhat.com/show_bug.cgi?id=2525639	external
https://www.cve.org/CVERecord?id=CVE-2026-56854	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56854	external
https://go.dev/cl/797040	external
https://go.dev/issue/80213	external
https://pkg.go.dev/vuln/GO-2026-6303	external
https://access.redhat.com/security/cve/CVE-2026-58062	self
https://bugzilla.redhat.com/show_bug.cgi?id=2510240	external
https://www.cve.org/CVERecord?id=CVE-2026-58062	external
https://nvd.nist.gov/vuln/detail/CVE-2026-58062	external
https://github.com/bcgit/bc-java/commit/add5f8226…	external
https://github.com/bcgit/bc-java/wiki/CVE-2026-58062	external
https://access.redhat.com/security/cve/CVE-2026-59280	self
https://bugzilla.redhat.com/show_bug.cgi?id=2525074	external
https://www.cve.org/CVERecord?id=CVE-2026-59280	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59280	external
https://spring.io/security/cve-2026-59280	external
https://access.redhat.com/security/cve/CVE-2026-59282	self
https://bugzilla.redhat.com/show_bug.cgi?id=2525254	external
https://www.cve.org/CVERecord?id=CVE-2026-59282	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59282	external
https://spring.io/security/cve-2026-59282	external
https://access.redhat.com/security/cve/CVE-2026-59283	self
https://bugzilla.redhat.com/show_bug.cgi?id=2525192	external
https://www.cve.org/CVERecord?id=CVE-2026-59283	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59283	external
https://spring.io/security/cve-2026-59283	external
https://access.redhat.com/security/cve/CVE-2026-59296	self
https://bugzilla.redhat.com/show_bug.cgi?id=2520949	external
https://www.cve.org/CVERecord?id=CVE-2026-59296	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59296	external
https://spring.io/security/cve-2026-59296	external
https://access.redhat.com/security/cve/CVE-2026-59313	self
https://bugzilla.redhat.com/show_bug.cgi?id=2525230	external
https://www.cve.org/CVERecord?id=CVE-2026-59313	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59313	external
https://spring.io/security/cve-2026-59313	external
https://access.redhat.com/security/cve/CVE-2026-59323	self
https://bugzilla.redhat.com/show_bug.cgi?id=2520940	external
https://www.cve.org/CVERecord?id=CVE-2026-59323	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59323	external
https://spring.io/security/cve-2026-59323	external
https://access.redhat.com/security/cve/CVE-2026-59651	self
https://bugzilla.redhat.com/show_bug.cgi?id=2510188	external
https://www.cve.org/CVERecord?id=CVE-2026-59651	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59651	external
https://github.com/bcgit/bc-java/commit/faf5daa6e…	external
https://github.com/bcgit/bc-java/wiki/CVE-2026-59651	external
https://access.redhat.com/security/cve/CVE-2026-59887	self
https://bugzilla.redhat.com/show_bug.cgi?id=2498146	external
https://www.cve.org/CVERecord?id=CVE-2026-59887	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59887	external
https://github.com/markdown-it/linkify-it/commit/…	external
https://github.com/markdown-it/linkify-it/release…	external
https://github.com/markdown-it/linkify-it/securit…	external
https://access.redhat.com/security/cve/CVE-2026-59899	self
https://bugzilla.redhat.com/show_bug.cgi?id=2507482	external
https://www.cve.org/CVERecord?id=CVE-2026-59899	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59899	external
https://github.com/netty/netty/security/advisorie…	external
https://netty.io/news/2026/07/09/4-1-136-Final.html	external
https://access.redhat.com/security/cve/CVE-2026-59901	self
https://bugzilla.redhat.com/show_bug.cgi?id=2507481	external
https://www.cve.org/CVERecord?id=CVE-2026-59901	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59901	external
https://access.redhat.com/security/cve/CVE-2026-62243	self
https://bugzilla.redhat.com/show_bug.cgi?id=2521309	external
https://www.cve.org/CVERecord?id=CVE-2026-62243	external
https://nvd.nist.gov/vuln/detail/CVE-2026-62243	external
https://github.com/netty/netty/security/advisorie…	external
https://www.vulncheck.com/advisories/netty-throug…	external
https://access.redhat.com/security/cve/CVE-2026-64607	self
https://bugzilla.redhat.com/show_bug.cgi?id=2509736	external
https://www.cve.org/CVERecord?id=CVE-2026-64607	external
https://nvd.nist.gov/vuln/detail/CVE-2026-64607	external
https://lists.apache.org/thread/qqfzo3fqcdk4l5496…	external
https://access.redhat.com/security/cve/CVE-2026-67213	self
https://bugzilla.redhat.com/show_bug.cgi?id=2508406	external
https://www.cve.org/CVERecord?id=CVE-2026-67213	external
https://nvd.nist.gov/vuln/detail/CVE-2026-67213	external
https://github.com/ai/nanoid/commit/cb3626d0f3342…	external
https://github.com/ai/nanoid/releases/tag/5.1.6	external
https://www.vulncheck.com/advisories/nanoid-befor…	external
https://access.redhat.com/security/cve/CVE-2026-67312	self
https://bugzilla.redhat.com/show_bug.cgi?id=2510007	external
https://www.cve.org/CVERecord?id=CVE-2026-67312	external
https://nvd.nist.gov/vuln/detail/CVE-2026-67312	external
https://github.com/axios/axios/security/advisorie…	external
https://www.vulncheck.com/advisories/axios-before…	external
https://access.redhat.com/security/cve/CVE-2026-67313	self
https://www.cve.org/CVERecord?id=CVE-2026-67313	external
https://access.redhat.com/security/cve/CVE-2026-67314	self
https://bugzilla.redhat.com/show_bug.cgi?id=2510030	external
https://www.cve.org/CVERecord?id=CVE-2026-67314	external
https://nvd.nist.gov/vuln/detail/CVE-2026-67314	external
https://github.com/axios/axios/security/advisorie…	external
https://www.vulncheck.com/advisories/axios-before…	external
https://access.redhat.com/security/cve/CVE-2026-67320	self
https://bugzilla.redhat.com/show_bug.cgi?id=2509993	external
https://www.cve.org/CVERecord?id=CVE-2026-67320	external
https://nvd.nist.gov/vuln/detail/CVE-2026-67320	external
https://github.com/axios/axios/commit/df53d7dd99b…	external
https://github.com/axios/axios/security/advisorie…	external
https://www.vulncheck.com/advisories/axios-before…	external
https://access.redhat.com/security/cve/CVE-2026-67321	self
https://bugzilla.redhat.com/show_bug.cgi?id=2510011	external
https://www.cve.org/CVERecord?id=CVE-2026-67321	external
https://nvd.nist.gov/vuln/detail/CVE-2026-67321	external
https://github.com/axios/axios/security/advisorie…	external
https://www.vulncheck.com/advisories/axios-before…	external
https://access.redhat.com/security/cve/CVE-2026-68494	self
https://bugzilla.redhat.com/show_bug.cgi?id=2511026	external
https://www.cve.org/CVERecord?id=CVE-2026-68494	external
https://nvd.nist.gov/vuln/detail/CVE-2026-68494	external
https://github.com/FasterXML/jackson-core/commit/…	external
https://github.com/FasterXML/jackson-core/commit/…	external
https://github.com/FasterXML/jackson-core/commit/…	external
https://github.com/FasterXML/jackson-core/pull/1611	external
https://github.com/FasterXML/jackson-core/securit…	external
https://github.com/advisories/GHSA-72hv-8253-57qq	external
https://www.cve.org/CVERecord?id=CVE-2026-18401	external
https://access.redhat.com/security/cve/CVE-2026-68497	self
https://bugzilla.redhat.com/show_bug.cgi?id=2531964	external
https://www.cve.org/CVERecord?id=CVE-2026-68497	external
https://nvd.nist.gov/vuln/detail/CVE-2026-68497	external
https://github.com/FasterXML/jackson-databind/com…	external
https://github.com/FasterXML/jackson-databind/pull/6127	external
https://github.com/FasterXML/jackson-databind/sec…	external
https://access.redhat.com/security/cve/CVE-2026-69152	self
https://bugzilla.redhat.com/show_bug.cgi?id=2510722	external
https://www.cve.org/CVERecord?id=CVE-2026-69152	external
https://nvd.nist.gov/vuln/detail/CVE-2026-69152	external
https://github.com/juliangruber/brace-expansion/c…	external
https://github.com/juliangruber/brace-expansion/c…	external
https://github.com/juliangruber/brace-expansion/c…	external
https://github.com/juliangruber/brace-expansion/c…	external
https://github.com/juliangruber/brace-expansion/s…	external
https://access.redhat.com/security/cve/CVE-2026-69192	self
https://bugzilla.redhat.com/show_bug.cgi?id=2510801	external
https://www.cve.org/CVERecord?id=CVE-2026-69192	external
https://nvd.nist.gov/vuln/detail/CVE-2026-69192	external
https://github.com/beaugunderson/ip-address/commi…	external
https://github.com/beaugunderson/ip-address/relea…	external
https://github.com/beaugunderson/ip-address/secur…	external
https://access.redhat.com/security/cve/CVE-2026-71290	self
https://bugzilla.redhat.com/show_bug.cgi?id=2514394	external
https://www.cve.org/CVERecord?id=CVE-2026-71290	external
https://nvd.nist.gov/vuln/detail/CVE-2026-71290	external
https://lists.apache.org/thread/bhf7g2zwpom2ohvwj…	external
https://access.redhat.com/security/cve/CVE-2026-71324	self
https://bugzilla.redhat.com/show_bug.cgi?id=2512342	external
https://www.cve.org/CVERecord?id=CVE-2026-71324	external
https://nvd.nist.gov/vuln/detail/CVE-2026-71324	external
https://github.com/traefik/traefik/commit/04d36f2…	external
https://github.com/traefik/traefik/commit/0807b6d…	external
https://github.com/traefik/traefik/commit/94a7508…	external
https://github.com/traefik/traefik/pull/13542	external
https://github.com/traefik/traefik/pull/13543	external
https://github.com/traefik/traefik/pull/13556	external
https://github.com/traefik/traefik/releases/tag/v…	external
https://github.com/traefik/traefik/releases/tag/v3.6.24	external
https://github.com/traefik/traefik/releases/tag/v3.7.9	external
https://github.com/traefik/traefik/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-71325	self
https://bugzilla.redhat.com/show_bug.cgi?id=2512238	external
https://www.cve.org/CVERecord?id=CVE-2026-71325	external
https://nvd.nist.gov/vuln/detail/CVE-2026-71325	external
https://github.com/traefik/traefik/commit/65ebf4b…	external
https://github.com/traefik/traefik/releases/tag/v…	external
https://github.com/traefik/traefik/releases/tag/v3.6.25	external
https://github.com/traefik/traefik/releases/tag/v3.7.10	external
https://github.com/traefik/traefik/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-71327	self
https://bugzilla.redhat.com/show_bug.cgi?id=2512294	external
https://www.cve.org/CVERecord?id=CVE-2026-71327	external
https://nvd.nist.gov/vuln/detail/CVE-2026-71327	external
https://github.com/traefik/traefik/commit/a764166…	external
https://github.com/traefik/traefik/pull/13580	external
https://github.com/traefik/traefik/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-73500	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515007	external
https://www.cve.org/CVERecord?id=CVE-2026-73500	external
https://nvd.nist.gov/vuln/detail/CVE-2026-73500	external
https://github.com/etcd-io/etcd/commit/2e07efce97…	external
https://github.com/etcd-io/etcd/commit/89ff6d5079…	external
https://github.com/etcd-io/etcd/commit/8e4dd0679a…	external
https://github.com/etcd-io/etcd/commit/f73cba7d92…	external
https://github.com/etcd-io/etcd/pull/22130	external
https://github.com/etcd-io/etcd/releases/tag/v3.5.33	external
https://github.com/etcd-io/etcd/releases/tag/v3.6.14	external
https://github.com/etcd-io/etcd/releases/tag/v3.7.1	external
https://github.com/etcd-io/etcd/security/advisori…	external
https://access.redhat.com/security/cve/CVE-2026-73508	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515377	external
https://www.cve.org/CVERecord?id=CVE-2026-73508	external
https://nvd.nist.gov/vuln/detail/CVE-2026-73508	external
https://github.com/netty/netty/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-74835	self
https://bugzilla.redhat.com/show_bug.cgi?id=2526842	external
https://www.cve.org/CVERecord?id=CVE-2026-74835	external
https://nvd.nist.gov/vuln/detail/CVE-2026-74835	external
https://cna.erlef.org/cves/CVE-2026-74835.html	external
https://github.com/erlang/otp/commit/0bceff0c2987…	external
https://github.com/erlang/otp/commit/7f9c460d1818…	external
https://github.com/erlang/otp/commit/8e1ca42b64df…	external
https://github.com/erlang/otp/security/advisories…	external
https://osv.dev/vulnerability/EEF-CVE-2026-74835	external
https://access.redhat.com/security/cve/CVE-2026-75838	self
https://bugzilla.redhat.com/show_bug.cgi?id=2517772	external
https://www.cve.org/CVERecord?id=CVE-2026-75838	external
https://nvd.nist.gov/vuln/detail/CVE-2026-75838	external
https://github.com/cure53/DOMPurify/security/advi…	external
https://www.vulncheck.com/advisories/dompurify-be…	external
https://access.redhat.com/security/cve/CVE-2026-75899	self
https://bugzilla.redhat.com/show_bug.cgi?id=2521778	external
https://www.cve.org/CVERecord?id=CVE-2026-75899	external
https://nvd.nist.gov/vuln/detail/CVE-2026-75899	external
https://github.com/fastify/fast-uri/security/advi…	external
https://access.redhat.com/security/cve/CVE-2026-75931	self
https://bugzilla.redhat.com/show_bug.cgi?id=2521777	external
https://www.cve.org/CVERecord?id=CVE-2026-75931	external
https://nvd.nist.gov/vuln/detail/CVE-2026-75931	external
https://github.com/fastify/fast-uri/security/advi…	external
https://access.redhat.com/security/cve/CVE-2026-76169	self
https://bugzilla.redhat.com/show_bug.cgi?id=2528456	external
https://www.cve.org/CVERecord?id=CVE-2026-76169	external
https://nvd.nist.gov/vuln/detail/CVE-2026-76169	external
https://github.com/fastify/fastify/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-81521	self
https://bugzilla.redhat.com/show_bug.cgi?id=2525215	external
https://www.cve.org/CVERecord?id=CVE-2026-81521	external
https://nvd.nist.gov/vuln/detail/CVE-2026-81521	external
https://pkg.go.dev/go.mongodb.org/mongo-driver/v2…	external
https://access.redhat.com/security/cve/CVE-2026-82417	self
https://bugzilla.redhat.com/show_bug.cgi?id=2525936	external
https://www.cve.org/CVERecord?id=CVE-2026-82417	external
https://nvd.nist.gov/vuln/detail/CVE-2026-82417	external
https://github.com/ljharb/qs/commit/e83d321ffafb3…	external
https://github.com/ljharb/qs/security/advisories/…	external
https://access.redhat.com/security/cve/CVE-2026-82562	self
https://bugzilla.redhat.com/show_bug.cgi?id=2525939	external
https://www.cve.org/CVERecord?id=CVE-2026-82562	external
https://nvd.nist.gov/vuln/detail/CVE-2026-82562	external
https://github.com/ljharb/qs/commit/8859c37470e11…	external
https://github.com/ljharb/qs/security/advisories/…	external
https://github.com/ljharb/qs/security/advisories/…	external
https://access.redhat.com/security/cve/CVE-2026-84292	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527747	external
https://www.cve.org/CVERecord?id=CVE-2026-84292	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84292	external
https://github.com/fastify/fast-uri/security/advi…	external
https://access.redhat.com/security/cve/CVE-2026-84375	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527118	external
https://www.cve.org/CVERecord?id=CVE-2026-84375	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84375	external
https://github.com/nodeca/js-yaml/commit/3485bc06…	external
https://github.com/nodeca/js-yaml/commit/6a8e05f9…	external
https://github.com/nodeca/js-yaml/commit/d90b6612…	external
https://github.com/nodeca/js-yaml/pull/797	external
https://github.com/nodeca/js-yaml/releases/tag/3.15.2	external
https://github.com/nodeca/js-yaml/releases/tag/4.3.2	external
https://github.com/nodeca/js-yaml/security/adviso…	external
https://access.redhat.com/security/cve/CVE-2026-84394	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527756	external
https://www.cve.org/CVERecord?id=CVE-2026-84394	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84394	external
https://github.com/fastify/fast-uri/security/advi…	external
https://access.redhat.com/security/cve/CVE-2026-84428	self
https://bugzilla.redhat.com/show_bug.cgi?id=2528468	external
https://www.cve.org/CVERecord?id=CVE-2026-84428	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84428	external
https://github.com/fastify/fastify/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-84445	self
https://bugzilla.redhat.com/show_bug.cgi?id=2533175	external
https://www.cve.org/CVERecord?id=CVE-2026-84445	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84445	external
https://github.com/grpc/grpc-go/commit/3822494d8e…	external
https://github.com/grpc/grpc-go/commit/8668b69c16…	external
https://github.com/grpc/grpc-go/commit/93e31b4854…	external
https://github.com/grpc/grpc-go/issues/9354	external
https://github.com/grpc/grpc-go/pull/9365	external
https://github.com/grpc/grpc-go/pull/9366	external
https://github.com/grpc/grpc-go/pull/9367	external
https://github.com/grpc/grpc-go/releases/tag/v1.82.2	external
https://github.com/grpc/grpc-go/releases/tag/v1.83.2	external
https://github.com/grpc/grpc-go/security/advisori…	external
https://access.redhat.com/security/cve/CVE-2026-84469	self
https://bugzilla.redhat.com/show_bug.cgi?id=2528458	external
https://www.cve.org/CVERecord?id=CVE-2026-84469	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84469	external
https://github.com/fastify/fastify/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-84504	self
https://bugzilla.redhat.com/show_bug.cgi?id=2528450	external
https://www.cve.org/CVERecord?id=CVE-2026-84504	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84504	external
https://github.com/fastify/fastify/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-84961	self
https://bugzilla.redhat.com/show_bug.cgi?id=2528735	external
https://www.cve.org/CVERecord?id=CVE-2026-84961	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84961	external
https://github.com/nodejs/undici/security/advisor…	external
https://access.redhat.com/security/cve/CVE-2026-85062	self
https://bugzilla.redhat.com/show_bug.cgi?id=2528259	external
https://www.cve.org/CVERecord?id=CVE-2026-85062	external
https://nvd.nist.gov/vuln/detail/CVE-2026-85062	external
https://github.com/omgovich/colord/commit/8701808…	external
https://github.com/omgovich/colord/pull/141	external
https://github.com/omgovich/colord/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-85124	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527955	external
https://www.cve.org/CVERecord?id=CVE-2026-85124	external
https://nvd.nist.gov/vuln/detail/CVE-2026-85124	external
https://github.com/fastify/fastify-http-proxy/sec…	external
https://access.redhat.com/security/cve/CVE-2026-85152	self
https://bugzilla.redhat.com/show_bug.cgi?id=2528717	external
https://www.cve.org/CVERecord?id=CVE-2026-85152	external
https://nvd.nist.gov/vuln/detail/CVE-2026-85152	external
https://github.com/nodejs/undici/security/advisor…	external
https://access.redhat.com/security/cve/CVE-2026-85595	self
https://bugzilla.redhat.com/show_bug.cgi?id=2529027	external
https://www.cve.org/CVERecord?id=CVE-2026-85595	external
https://nvd.nist.gov/vuln/detail/CVE-2026-85595	external
https://github.com/traefik/traefik/security/advis…	external
https://www.vulncheck.com/advisories/traefik-befo…	external
https://access.redhat.com/security/cve/CVE-2026-85597	self
https://bugzilla.redhat.com/show_bug.cgi?id=2528835	external
https://www.cve.org/CVERecord?id=CVE-2026-85597	external
https://nvd.nist.gov/vuln/detail/CVE-2026-85597	external
https://github.com/traefik/traefik/security/advis…	external
https://www.vulncheck.com/advisories/traefik-befo…	external
https://access.redhat.com/security/cve/CVE-2026-86063	self
https://bugzilla.redhat.com/show_bug.cgi?id=2551595	external
https://www.cve.org/CVERecord?id=CVE-2026-86063	external
https://nvd.nist.gov/vuln/detail/CVE-2026-86063	external
https://github.com/anthropics/claude-code/release…	external
https://github.com/anthropics/claude-code/securit…	external
https://access.redhat.com/security/cve/CVE-2026-87743	self
https://bugzilla.redhat.com/show_bug.cgi?id=2530523	external
https://www.cve.org/CVERecord?id=CVE-2026-87743	external
https://nvd.nist.gov/vuln/detail/CVE-2026-87743	external
https://access.redhat.com/security/cve/CVE-2026-88004	self
https://bugzilla.redhat.com/show_bug.cgi?id=2531483	external
https://www.cve.org/CVERecord?id=CVE-2026-88004	external
https://nvd.nist.gov/vuln/detail/CVE-2026-88004	external
https://github.com/traefik/traefik/commit/55bbda4…	external
https://github.com/traefik/traefik/pull/13822	external
https://github.com/traefik/traefik/releases/tag/v3.7.13	external
https://github.com/traefik/traefik/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-88007	self
https://bugzilla.redhat.com/show_bug.cgi?id=2531486	external
https://www.cve.org/CVERecord?id=CVE-2026-88007	external
https://nvd.nist.gov/vuln/detail/CVE-2026-88007	external
https://github.com/traefik/traefik/commit/ff39c47…	external
https://github.com/traefik/traefik/pull/13812	external
https://github.com/traefik/traefik/releases/tag/v…	external
https://github.com/traefik/traefik/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-88008	self
https://bugzilla.redhat.com/show_bug.cgi?id=2531489	external
https://www.cve.org/CVERecord?id=CVE-2026-88008	external
https://nvd.nist.gov/vuln/detail/CVE-2026-88008	external
https://github.com/traefik/traefik/commit/a277e94…	external
https://github.com/traefik/traefik/pull/13797	external
https://github.com/traefik/traefik/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-88009	self
https://bugzilla.redhat.com/show_bug.cgi?id=2531505	external
https://www.cve.org/CVERecord?id=CVE-2026-88009	external
https://nvd.nist.gov/vuln/detail/CVE-2026-88009	external
https://github.com/traefik/traefik/commit/58d1e9c…	external
https://github.com/traefik/traefik/pull/13796	external
https://github.com/traefik/traefik/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-88011	self
https://bugzilla.redhat.com/show_bug.cgi?id=2531524	external
https://www.cve.org/CVERecord?id=CVE-2026-88011	external
https://nvd.nist.gov/vuln/detail/CVE-2026-88011	external
https://github.com/traefik/traefik/commit/0331801…	external
https://github.com/traefik/traefik/pull/13720	external
https://github.com/traefik/traefik/releases/tag/v…	external
https://github.com/traefik/traefik/releases/tag/v3.7.12	external
https://github.com/traefik/traefik/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-88012	self
https://bugzilla.redhat.com/show_bug.cgi?id=2531519	external
https://www.cve.org/CVERecord?id=CVE-2026-88012	external
https://nvd.nist.gov/vuln/detail/CVE-2026-88012	external
https://github.com/traefik/traefik/commit/a8d0bc4…	external
https://github.com/traefik/traefik/pull/13717	external
https://github.com/traefik/traefik/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-88031	self
https://bugzilla.redhat.com/show_bug.cgi?id=2531587	external
https://www.cve.org/CVERecord?id=CVE-2026-88031	external
https://nvd.nist.gov/vuln/detail/CVE-2026-88031	external
https://jira.mongodb.org/browse/GODRIVER-4081	external
https://www.mongodb.com/community/forums/t/mongod…	external
https://access.redhat.com/security/cve/CVE-2026-88878	self
https://bugzilla.redhat.com/show_bug.cgi?id=2531451	external
https://www.cve.org/CVERecord?id=CVE-2026-88878	external
https://nvd.nist.gov/vuln/detail/CVE-2026-88878	external
https://www.vulncheck.com/advisories/traefik-2.8.…	external
https://access.redhat.com/security/cve/CVE-2026-88879	self
https://bugzilla.redhat.com/show_bug.cgi?id=2531425	external
https://www.cve.org/CVERecord?id=CVE-2026-88879	external
https://nvd.nist.gov/vuln/detail/CVE-2026-88879	external
https://www.vulncheck.com/advisories/traefik-befo…	external
https://access.redhat.com/security/cve/CVE-2026-90711	self
https://bugzilla.redhat.com/show_bug.cgi?id=2533602	external
https://www.cve.org/CVERecord?id=CVE-2026-90711	external
https://nvd.nist.gov/vuln/detail/CVE-2026-90711	external
https://github.com/jshttp/proxy-addr/security/adv…	external
https://access.redhat.com/security/cve/CVE-2026-93749	self
https://bugzilla.redhat.com/show_bug.cgi?id=2538368	external
https://www.cve.org/CVERecord?id=CVE-2026-93749	external
https://nvd.nist.gov/vuln/detail/CVE-2026-93749	external
https://github.com/7rulnik/source-map-js	external
https://github.com/7rulnik/source-map-js/blob/c1c…	external
https://github.com/7rulnik/source-map-js/issues/76	external
https://www.vulncheck.com/advisories/source-map-j…	external
https://access.redhat.com/security/cve/CVE-2026-100655	self
https://bugzilla.redhat.com/show_bug.cgi?id=2541863	external
https://www.cve.org/CVERecord?id=CVE-2026-100655	external
https://nvd.nist.gov/vuln/detail/CVE-2026-100655	external
https://github.com/netty/netty/security/advisorie…	external
https://www.vulncheck.com/advisories/netty-before…	external
https://access.redhat.com/security/cve/CVE-2026-100656	self
https://www.cve.org/CVERecord?id=CVE-2026-100656	external
https://access.redhat.com/security/cve/CVE-2026-100666	self
https://bugzilla.redhat.com/show_bug.cgi?id=2541907	external
https://www.cve.org/CVERecord?id=CVE-2026-100666	external
https://nvd.nist.gov/vuln/detail/CVE-2026-100666	external
https://github.com/netty/netty/security/advisorie…	external
https://www.vulncheck.com/advisories/netty-4.2.0-…	external
https://access.redhat.com/security/cve/CVE-2026-101916	self
https://bugzilla.redhat.com/show_bug.cgi?id=2542678	external
https://www.cve.org/CVERecord?id=CVE-2026-101916	external
https://nvd.nist.gov/vuln/detail/CVE-2026-101916	external
https://github.com/grpc/grpc-node/commit/2a84ec8b…	external
https://github.com/grpc/grpc-node/commit/b4e0079c…	external
https://github.com/grpc/grpc-node/releases/tag/@g…	external
https://github.com/grpc/grpc-node/security/adviso…	external
https://access.redhat.com/security/cve/CVE-2026-102925	self
https://bugzilla.redhat.com/show_bug.cgi?id=2543654	external
https://www.cve.org/CVERecord?id=CVE-2026-102925	external
https://nvd.nist.gov/vuln/detail/CVE-2026-102925	external
https://github.com/pypa/virtualenv/commit/4d5a105…	external
https://github.com/pypa/virtualenv/pull/3252	external
https://github.com/pypa/virtualenv/releases/tag/21.7.13	external
https://github.com/pypa/virtualenv/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-102930	self
https://bugzilla.redhat.com/show_bug.cgi?id=2543652	external
https://www.cve.org/CVERecord?id=CVE-2026-102930	external
https://nvd.nist.gov/vuln/detail/CVE-2026-102930	external
https://github.com/pypa/virtualenv/commit/a01ed3e…	external
https://github.com/pypa/virtualenv/pull/3251	external
https://github.com/pypa/virtualenv/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-103435	self
https://bugzilla.redhat.com/show_bug.cgi?id=2547427	external
https://www.cve.org/CVERecord?id=CVE-2026-103435	external
https://nvd.nist.gov/vuln/detail/CVE-2026-103435	external
https://github.com/anthropics/claude-code/securit…	external
https://access.redhat.com/security/cve/CVE-2026-109618	self
https://bugzilla.redhat.com/show_bug.cgi?id=2553995	external
https://access.redhat.com/security/vulnerabilitie…	external
https://www.cve.org/CVERecord?id=CVE-2026-109618	external
https://nvd.nist.gov/vuln/detail/CVE-2026-109618	external
https://github.com/php/php-src/security/advisorie…	external
https://www.cisa.gov/known-exploited-vulnerabilit…	external
https://access.redhat.com/security/cve/CVE-2026-109619	self
https://bugzilla.redhat.com/show_bug.cgi?id=2554177	external
https://www.cve.org/CVERecord?id=CVE-2026-109619	external
https://nvd.nist.gov/vuln/detail/CVE-2026-109619	external
https://github.com/php/php-src/security/advisorie…	external

Acknowledgments

https://github.com/Michael-JRead Michael Read

JSON

To clipboard

Loading 4.7 MB of JSON…

CVE-2026-75838 (GCVE-0-2026-75838)

Vulnerability from cvelistv5 – Published: 2026-08-18 11:19 – Updated: 2026-08-18 13:38

Title

DOMPurify before 3.4.13 Cross-Site Scripting via IN_PLACE hook

Summary

DOMPurify before 3.4.13 contains a cross-site scripting vulnerability in IN_PLACE sanitization where element-removal hooks fail to neutralize detached subtrees. Attackers can supply HTML with event handlers on descendant elements that execute after sanitization completes, even though the returned root appears clean.

Severity

5.1 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-18 13:36 UTC

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

VulnCheck CNA under the mitre root

CNA scorecard B 84/100 over 7150 records in the last 180 days details

References

2 references

URL	Tags
https://github.com/cure53/DOMPurify/security/advi…	vendor-advisory
https://www.vulncheck.com/advisories/dompurify-be…	third-party-advisory

Impacted products

1 product

Vendor	Product	Version
cure53	DOMPurify	Affected: 0 , < 3.4.13 (semver) Unaffected: 3.4.13 (semver) cpe:2.3:a:cure53:dompurify::::::::

Date Public

2026-08-03 00:00

Credits

koyokr

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-75838",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-18T13:36:33.246643Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-18T13:38:34.515Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/cure53/DOMPurify/security/advisories/GHSA-55q2-fjhq-7xh7"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:npm/dompurify",
          "product": "DOMPurify",
          "vendor": "cure53",
          "versions": [
            {
              "lessThan": "3.4.13",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "3.4.13",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:cure53:dompurify:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "3.4.13",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "koyokr"
        }
      ],
      "datePublic": "2026-08-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "DOMPurify before 3.4.13 contains a cross-site scripting vulnerability in IN_PLACE sanitization where element-removal hooks fail to neutralize detached subtrees. Attackers can supply HTML with event handlers on descendant elements that execute after sanitization completes, even though the returned root appears clean."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "LOW",
            "userInteraction": "PASSIVE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-18T11:19:47.885Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "GitHub Security Advisory (GHSA-55q2-fjhq-7xh7)",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/cure53/DOMPurify/security/advisories/GHSA-55q2-fjhq-7xh7"
        },
        {
          "name": "VulnCheck Advisory: DOMPurify before 3.4.13 Cross-Site Scripting via IN_PLACE hook",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/dompurify-before-cross-site-scripting-via-in-place-hook"
        }
      ],
      "title": "DOMPurify before 3.4.13 Cross-Site Scripting via IN_PLACE hook",
      "x_generator": {
        "engine": "vulncheck-endgame"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-75838",
    "datePublished": "2026-08-18T11:19:47.885Z",
    "dateReserved": "2026-08-18T10:59:33.701Z",
    "dateUpdated": "2026-08-18T13:38:34.515Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-75899 (GCVE-0-2026-75899)

Vulnerability from cvelistv5 – Published: 2026-08-24 09:40 – Updated: 2026-08-24 16:19

Title

fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding

Summary

fast-uri is a URI parser for Node.js. It decodes percent escapes in a hostname during parsing and then decodes the parsed hostname a second time during authority recomposition, so a single call to normalize or resolve can turn nested percent-encoded input into a different network destination such as a loopback hostname or address. For example, a doubly encoded host that spells out a loopback name decodes to that live host in one operation, which contradicts RFC 3986 section 2.4 that an implementation must not decode the same string more than once. An application that normalizes or resolves an untrusted HTTP-family URI before outbound routing, redirect validation, or a host-policy check can receive a destination different from the one the original encoded host represented, giving a server-side request forgery and host-policy bypass primitive. This is an incomplete-fix variant of CVE-2026-6322. The affected versions are 2.4.1 up to but not including 2.4.5, 3.1.2 up to but not including 3.1.6, and 4.0.0 up to but not including 4.1.3. The issue is fixed in 2.4.5, 3.1.6, and 4.1.3, which normalize percent escapes once and preserve encoded percent signs. Users should upgrade to a patched version.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-24 16:16 UTC

CWE

CWE-174 - Double Decoding of the Same Data
CWE-918 - Server-Side Request Forgery (SSRF)

Assigner

openjs CNA under the redhat root

CNA scorecard C 65/100 over 121 records in the last 180 days details

References

2 references

URL	Tags
https://github.com/fastify/fast-uri/security/advi…
https://cna.openjsf.org/security-advisories.html

Impacted products

1 product

Vendor	Product	Version
fast-uri	fast-uri	Affected: 2.4.1 , < 2.4.5 (semver) Unaffected: 2.4.5 (semver) Affected: 3.1.2 , < 3.1.6 (semver) Unaffected: 3.1.6 (semver) Affected: 4.0.0 , < 4.1.3 (semver) Unaffected: 4.1.3 (semver)

Credits

mcollina UlisesGascon NotAFlightRisk

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-75899",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-24T16:16:34.392088Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-24T16:19:58.701Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:npm/fast-uri",
          "product": "fast-uri",
          "vendor": "fast-uri",
          "versions": [
            {
              "lessThan": "2.4.5",
              "status": "affected",
              "version": "2.4.1",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "2.4.5",
              "versionType": "semver"
            },
            {
              "lessThan": "3.1.6",
              "status": "affected",
              "version": "3.1.2",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "3.1.6",
              "versionType": "semver"
            },
            {
              "lessThan": "4.1.3",
              "status": "affected",
              "version": "4.0.0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "4.1.3",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "mcollina"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "UlisesGascon"
        },
        {
          "lang": "en",
          "type": "reporter",
          "value": "NotAFlightRisk"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "fast-uri is a URI parser for Node.js. It decodes percent escapes in a hostname during parsing and then decodes the parsed hostname a second time during authority recomposition, so a single call to normalize or resolve can turn nested percent-encoded input into a different network destination such as a loopback hostname or address. For example, a doubly encoded host that spells out a loopback name decodes to that live host in one operation, which contradicts RFC 3986 section 2.4 that an implementation must not decode the same string more than once. An application that normalizes or resolves an untrusted HTTP-family URI before outbound routing, redirect validation, or a host-policy check can receive a destination different from the one the original encoded host represented, giving a server-side request forgery and host-policy bypass primitive. This is an incomplete-fix variant of CVE-2026-6322. The affected versions are 2.4.1 up to but not including 2.4.5, 3.1.2 up to but not including 3.1.6, and 4.0.0 up to but not including 4.1.3. The issue is fixed in 2.4.5, 3.1.6, and 4.1.3, which normalize percent escapes once and preserve encoded percent signs. Users should upgrade to a patched version."
            }
          ],
          "value": "fast-uri is a URI parser for Node.js. It decodes percent escapes in a hostname during parsing and then decodes the parsed hostname a second time during authority recomposition, so a single call to normalize or resolve can turn nested percent-encoded input into a different network destination such as a loopback hostname or address. For example, a doubly encoded host that spells out a loopback name decodes to that live host in one operation, which contradicts RFC 3986 section 2.4 that an implementation must not decode the same string more than once. An application that normalizes or resolves an untrusted HTTP-family URI before outbound routing, redirect validation, or a host-policy check can receive a destination different from the one the original encoded host represented, giving a server-side request forgery and host-policy bypass primitive. This is an incomplete-fix variant of CVE-2026-6322. The affected versions are 2.4.1 up to but not including 2.4.5, 3.1.2 up to but not including 3.1.6, and 4.0.0 up to but not including 4.1.3. The issue is fixed in 2.4.5, 3.1.6, and 4.1.3, which normalize percent escapes once and preserve encoded percent signs. Users should upgrade to a patched version."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-174",
              "description": "CWE-174: Double Decoding of the Same Data",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-918",
              "description": "CWE-918: Server-Side Request Forgery (SSRF)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-24T09:40:19.801Z",
        "orgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
        "shortName": "openjs"
      },
      "references": [
        {
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-fph4-wmhf-6fwf"
        },
        {
          "url": "https://cna.openjsf.org/security-advisories.html"
        }
      ],
      "title": "fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding",
      "x_generator": {
        "engine": "cve-kit 1.0.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
    "assignerShortName": "openjs",
    "cveId": "CVE-2026-75899",
    "datePublished": "2026-08-24T09:40:19.801Z",
    "dateReserved": "2026-08-18T14:27:47.424Z",
    "dateUpdated": "2026-08-24T16:19:58.701Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-75931 (GCVE-0-2026-75931)

Vulnerability from cvelistv5 – Published: 2026-08-24 09:30 – Updated: 2026-08-24 16:28

Title

fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references

Summary

fast-uri is a URI parser for Node.js. It canonicalizes a host to its ASCII form only when the input carries an explicit scheme, so a scheme-relative reference such as a host preceded by two slashes is returned with its host verbatim and no error set. As a result fast-uri's own entry points disagree with each other: parse, resolve, normalize, and equal can yield different hosts for the same input depending only on whether a scheme is written out, and equal can return opposite verdicts for the same pair of hosts. An application that extracts a host with fast-uri to check it against a policy list and then resolves the same reference can make its decision on one host while the destination is another, enabling host confusion and policy bypass. The affected versions are 2.4.2 up to but not including 2.4.5, 3.1.3 up to but not including 3.1.6, and 4.0.1 up to but not including 4.1.3. The issue is fixed in 2.4.5, 3.1.6, and 4.1.3, which canonicalize the host consistently across the resolve path. Users should upgrade to a patched version.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-24 16:28 UTC

CWE

CWE-436 - Interpretation Conflict

Assigner

openjs CNA under the redhat root

CNA scorecard C 65/100 over 121 records in the last 180 days details

References

2 references

URL	Tags
https://github.com/fastify/fast-uri/security/advi…
https://cna.openjsf.org/security-advisories.html

Impacted products

1 product

Vendor	Product	Version
fast-uri	fast-uri	Affected: 2.4.2 , < 2.4.5 (semver) Unaffected: 2.4.5 (semver) Affected: 3.1.3 , < 3.1.6 (semver) Unaffected: 3.1.6 (semver) Affected: 4.0.1 , < 4.1.3 (semver) Unaffected: 4.1.3 (semver)

Credits

baeseungwon1010 mcollina UlisesGascon

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-75931",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-24T16:28:35.705177Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-24T16:28:48.098Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:npm/fast-uri",
          "product": "fast-uri",
          "vendor": "fast-uri",
          "versions": [
            {
              "lessThan": "2.4.5",
              "status": "affected",
              "version": "2.4.2",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "2.4.5",
              "versionType": "semver"
            },
            {
              "lessThan": "3.1.6",
              "status": "affected",
              "version": "3.1.3",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "3.1.6",
              "versionType": "semver"
            },
            {
              "lessThan": "4.1.3",
              "status": "affected",
              "version": "4.0.1",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "4.1.3",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "baeseungwon1010"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "mcollina"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "UlisesGascon"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "fast-uri is a URI parser for Node.js. It canonicalizes a host to its ASCII form only when the input carries an explicit scheme, so a scheme-relative reference such as a host preceded by two slashes is returned with its host verbatim and no error set. As a result fast-uri\u0027s own entry points disagree with each other: parse, resolve, normalize, and equal can yield different hosts for the same input depending only on whether a scheme is written out, and equal can return opposite verdicts for the same pair of hosts. An application that extracts a host with fast-uri to check it against a policy list and then resolves the same reference can make its decision on one host while the destination is another, enabling host confusion and policy bypass. The affected versions are 2.4.2 up to but not including 2.4.5, 3.1.3 up to but not including 3.1.6, and 4.0.1 up to but not including 4.1.3. The issue is fixed in 2.4.5, 3.1.6, and 4.1.3, which canonicalize the host consistently across the resolve path. Users should upgrade to a patched version."
            }
          ],
          "value": "fast-uri is a URI parser for Node.js. It canonicalizes a host to its ASCII form only when the input carries an explicit scheme, so a scheme-relative reference such as a host preceded by two slashes is returned with its host verbatim and no error set. As a result fast-uri\u0027s own entry points disagree with each other: parse, resolve, normalize, and equal can yield different hosts for the same input depending only on whether a scheme is written out, and equal can return opposite verdicts for the same pair of hosts. An application that extracts a host with fast-uri to check it against a policy list and then resolves the same reference can make its decision on one host while the destination is another, enabling host confusion and policy bypass. The affected versions are 2.4.2 up to but not including 2.4.5, 3.1.3 up to but not including 3.1.6, and 4.0.1 up to but not including 4.1.3. The issue is fixed in 2.4.5, 3.1.6, and 4.1.3, which canonicalize the host consistently across the resolve path. Users should upgrade to a patched version."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-436",
              "description": "CWE-436: Interpretation Conflict",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-24T09:30:04.212Z",
        "orgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
        "shortName": "openjs"
      },
      "references": [
        {
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-5jgf-p345-68v8"
        },
        {
          "url": "https://cna.openjsf.org/security-advisories.html"
        }
      ],
      "title": "fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references",
      "x_generator": {
        "engine": "cve-kit 1.0.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
    "assignerShortName": "openjs",
    "cveId": "CVE-2026-75931",
    "datePublished": "2026-08-24T09:30:04.212Z",
    "dateReserved": "2026-08-18T15:43:33.460Z",
    "dateUpdated": "2026-08-24T16:28:48.098Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-76169 (GCVE-0-2026-76169)

Vulnerability from cvelistv5 – Published: 2026-09-04 09:51 – Updated: 2026-09-04 16:20

Title

fastify vulnerable to authentication bypass via malformed URLs reaching encapsulated not-found handlers

Summary

fastify versions >= 4.0.0 and before 5.12.2 can route a malformed URL sent under one plugin prefix to the custom not-found handler of a different sibling plugin, and invoke it without the preHandler hook declared for that handler. The internal not-found router for encapsulated handlers dispatches malformed paths through a single shared handler pointer before URL decoding, ignoring the prefix and skipping the selected handler's normal lifecycle. An unauthenticated attacker can therefore reach an authentication-protected private fallback through an unrelated public prefix and read its full response, bypassing the authentication hook and breaking prefix encapsulation. Users should upgrade to fastify 5.12.2 or later.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-04 16:18 UTC

CWE

CWE-288 - Authentication Bypass Using an Alternate Path or Channel

Assigner

openjs CNA under the redhat root

CNA scorecard C 65/100 over 121 records in the last 180 days details

References

2 references

URL	Tags
https://github.com/fastify/fastify/security/advis…
https://cna.openjsf.org/security-advisories.html

Impacted products

1 product

Vendor	Product	Version
fastify	fastify	Affected: 4.0.0 , < 5.12.2 (semver) Unaffected: 5.12.2 (semver)

Credits

vvvvvvvvvvitel mcollina UlisesGascon schecthellraiser606 B1gN0Se

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-76169",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-04T16:18:32.577097Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-04T16:20:02.318Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:npm/fastify",
          "product": "fastify",
          "vendor": "fastify",
          "versions": [
            {
              "lessThan": "5.12.2",
              "status": "affected",
              "version": "4.0.0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "5.12.2",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "vvvvvvvvvvitel"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "mcollina"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "UlisesGascon"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "schecthellraiser606"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "B1gN0Se"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "fastify versions \u003e= 4.0.0 and before 5.12.2 can route a malformed URL sent under one plugin prefix to the custom not-found handler of a different sibling plugin, and invoke it without the preHandler hook declared for that handler. The internal not-found router for encapsulated handlers dispatches malformed paths through a single shared handler pointer before URL decoding, ignoring the prefix and skipping the selected handler\u0027s normal lifecycle. An unauthenticated attacker can therefore reach an authentication-protected private fallback through an unrelated public prefix and read its full response, bypassing the authentication hook and breaking prefix encapsulation. Users should upgrade to fastify 5.12.2 or later."
            }
          ],
          "value": "fastify versions \u003e= 4.0.0 and before 5.12.2 can route a malformed URL sent under one plugin prefix to the custom not-found handler of a different sibling plugin, and invoke it without the preHandler hook declared for that handler. The internal not-found router for encapsulated handlers dispatches malformed paths through a single shared handler pointer before URL decoding, ignoring the prefix and skipping the selected handler\u0027s normal lifecycle. An unauthenticated attacker can therefore reach an authentication-protected private fallback through an unrelated public prefix and read its full response, bypassing the authentication hook and breaking prefix encapsulation. Users should upgrade to fastify 5.12.2 or later."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-288",
              "description": "CWE-288: Authentication Bypass Using an Alternate Path or Channel",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-04T09:51:03.556Z",
        "orgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
        "shortName": "openjs"
      },
      "references": [
        {
          "url": "https://github.com/fastify/fastify/security/advisories/GHSA-p68q-wchp-6fh7"
        },
        {
          "url": "https://cna.openjsf.org/security-advisories.html"
        }
      ],
      "title": "fastify vulnerable to authentication bypass via malformed URLs reaching encapsulated not-found handlers",
      "x_generator": {
        "engine": "cve-kit 1.0.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
    "assignerShortName": "openjs",
    "cveId": "CVE-2026-76169",
    "datePublished": "2026-09-04T09:51:03.556Z",
    "dateReserved": "2026-08-19T09:33:54.670Z",
    "dateUpdated": "2026-09-04T16:20:02.318Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-81521 (GCVE-0-2026-81521)

Vulnerability from cvelistv5 – Published: 2026-08-27 18:31 – Updated: 2026-10-06 18:17

Title

Cross-database write retargeting via unvalidated dotted database name in Client.BulkWrite in the MongoDB Go Driver

Summary

The MongoDB Go Driver's client-level bulk write operation may accept a caller-supplied database name containing a reserved separator character without escaping it before the name is used to build the target namespace for the operation. An application that passes untrusted input as a database name could therefore have the write directed at a database and collection other than the ones it intended. Only the Client.BulkWrite API is affected.

Severity

7.1 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-28 15:52 UTC

CWE

CWE-99 - Improper Control of Resource Identifiers ('Resource Injection')

Assigner

mongodb CNA under the mitre root

CNA scorecard C 70/100 over 222 records in the last 180 days details

References

2 references

URL	Tags
https://jira.mongodb.org/browse/GODRIVER-4075
https://pkg.go.dev/go.mongodb.org/mongo-driver/v2…

Impacted products

1 product

Vendor	Product	Version
MongoDB	GO Driver	Affected: 2.1.0 , < 2.8.2 (semver) Affected: 2.9.0 , < 2.9.2 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-81521",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-28T15:52:01.062590Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-28T15:52:13.039Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "GO Driver",
          "vendor": "MongoDB",
          "versions": [
            {
              "lessThan": "2.8.2",
              "status": "affected",
              "version": "2.1.0",
              "versionType": "semver"
            },
            {
              "lessThan": "2.9.2",
              "status": "affected",
              "version": "2.9.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The MongoDB Go Driver\u0027s client-level bulk write operation may accept a caller-supplied database name containing a reserved separator character without escaping it before the name is used to build the target namespace for the operation. An application that passes untrusted input as a database name could therefore have the write directed at a database and collection other than the ones it intended. Only the Client.BulkWrite API is affected."
            }
          ],
          "value": "The MongoDB Go Driver\u0027s client-level bulk write operation may accept a caller-supplied database name containing a reserved separator character without escaping it before the name is used to build the target namespace for the operation. An application that passes untrusted input as a database name could therefore have the write directed at a database and collection other than the ones it intended. Only the Client.BulkWrite API is affected."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-99",
              "description": "CWE-99: Improper Control of Resource Identifiers (\u0027Resource Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-06T18:17:46.581Z",
        "orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
        "shortName": "mongodb"
      },
      "references": [
        {
          "url": "https://jira.mongodb.org/browse/GODRIVER-4075"
        },
        {
          "url": "https://pkg.go.dev/go.mongodb.org/mongo-driver/v2@v2.8.2"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "title": "Cross-database write retargeting via unvalidated dotted database name in Client.BulkWrite in the MongoDB Go Driver",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
    "assignerShortName": "mongodb",
    "cveId": "CVE-2026-81521",
    "datePublished": "2026-08-27T18:31:45.450Z",
    "dateReserved": "2026-08-26T22:13:12.343Z",
    "dateUpdated": "2026-10-06T18:17:46.581Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-82417 (GCVE-0-2026-82417)

Vulnerability from cvelistv5 – Published: 2026-08-29 23:51 – Updated: 2026-08-31 17:08

Title

qs.stringify throws TypeError on objects with a non-callable constructor.isBuffer property

Summary

### Summary `qs.stringify` throws a `TypeError` when it serializes an object whose own `constructor` property has a truthy, non-callable `isBuffer` member. `utils.isBuffer` duck-types buffers by calling `obj.constructor.isBuffer(obj)` after checking only that the property is truthy, so a value such as `{ constructor: { isBuffer: "x" } }` makes the call throw `TypeError: obj.constructor.isBuffer is not a function`. ### Details `lib/stringify.js:127` calls `utils.isBuffer` on every non-primitive value it serializes. `utils.isBuffer` (`lib/utils.js:332`) reads `obj.constructor.isBuffer` and invokes it without verifying that it is a function. `constructor` and `isBuffer` are ordinary property names, so any object carrying them as own properties reaches the unchecked call. Such an object can be built from untrusted input. `qs.parse("x[constructor][isBuffer]=y", { plainObjects: true })` or `{ allowPrototypes: true }` keeps the `constructor` key as an own property (the default parse options drop it), and `JSON.parse("{\"a\":{\"constructor\":{\"isBuffer\":\"x\"}}}")` produces the same shape with no qs option involved. Express 4 with its default `query parser` setting and body-parser with `extended: true` both call `qs.parse` with `allowPrototypes: true`, so on those stacks `req.query` and `req.body` can carry the shape directly. #### PoC ```js var qs = require("qs"); qs.stringify(qs.parse("x[constructor][isBuffer]=y", { plainObjects: true })); qs.stringify(JSON.parse("{\"a\":{\"constructor\":{\"isBuffer\":\"x\"}}}")); // TypeError: obj.constructor.isBuffer is not a function // at Object.isBuffer (lib/utils.js:332:78) // at stringify (lib/stringify.js:127:45) ``` #### Fix `lib/utils.js`, applied in e83d321 on `main` and released as v6.16.0: ```diff - return !!(obj.constructor && obj.constructor.isBuffer && obj.constructor.isBuffer(obj)); + return !!(obj.constructor && typeof obj.constructor.isBuffer === "function" && obj.constructor.isBuffer(obj)); ``` Real `Buffer`, `safer-buffer`, and browserify `buffer` polyfill instances serialize exactly as before; only the throw is removed. ### Affected versions `>=2.2.5 <6.16.0`, fixed in v6.16.0. The unguarded duck-type was introduced in 3768a75 and first shipped in v2.2.5 (September 2014). v2.2.4 and earlier used `Buffer.isBuffer` and are not affected. Every release from v2.2.5 through v6.15.3 contains the unguarded call. ### Impact An unauthenticated request can make any code path that re-serializes attacker-influenced data with `qs.stringify` (for example, rebuilding a query string from `req.query` for a redirect or an upstream request, or serializing a parsed JSON body) throw synchronously. In a typical Node.js HTTP framework the throw is caught by the framework error boundary and the affected request returns a 500; the process survives and other requests are unaffected. Where the call runs outside an error boundary, such as an `async` Express 4 handler (where the throw becomes an unhandled promise rejection) or a background job, the process exits, so the impact in that case depends on the application error handling rather than on qs.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

6.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

SSVC

Exploitation: poc Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-31 17:07 UTC

CWE

CWE-248 - Uncaught Exception
CWE-703 - Improper Check or Handling of Exceptional Conditions

Assigner

harborist CNA under the redhat root

CNA scorecard B 86/100 over 15 records in the last 180 days details

References

2 references

URL	Tags
https://github.com/ljharb/qs/security/advisories/…	vendor-advisory
https://github.com/ljharb/qs/commit/e83d321ffafb3…	patch

Impacted products

1 product

Vendor	Product	Version
ljharb	qs	Affected: 2.2.5 , < 6.16.0 (semver)

Credits

waydeshi ljharb

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-82417",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-31T17:07:54.823942Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-31T17:08:24.074Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/ljharb/qs/security/advisories/GHSA-4mjr-xmp4-gh2g"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://npmjs.com/qs",
          "defaultStatus": "unaffected",
          "packageName": "qs",
          "product": "qs",
          "repo": "https://github.com/ljharb/qs",
          "vendor": "ljharb",
          "versions": [
            {
              "lessThan": "6.16.0",
              "status": "affected",
              "version": "2.2.5",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "waydeshi"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "ljharb"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e### Summary\u003c/p\u003e\u003cp\u003e`qs.stringify` throws a `TypeError` when it serializes an object whose own `constructor` property has a truthy, non-callable `isBuffer` member. `utils.isBuffer` duck-types buffers by calling `obj.constructor.isBuffer(obj)` after checking only that the property is truthy, so a value such as `{ constructor: { isBuffer: \"x\" } }` makes the call throw `TypeError: obj.constructor.isBuffer is not a function`.\u003c/p\u003e\u003cp\u003e### Details\u003c/p\u003e\u003cp\u003e`lib/stringify.js:127` calls `utils.isBuffer` on every non-primitive value it serializes. `utils.isBuffer` (`lib/utils.js:332`) reads `obj.constructor.isBuffer` and invokes it without verifying that it is a function. `constructor` and `isBuffer` are ordinary property names, so any object carrying them as own properties reaches the unchecked call.\u003c/p\u003e\u003cp\u003eSuch an object can be built from untrusted input. `qs.parse(\"x[constructor][isBuffer]=y\", { plainObjects: true })` or `{ allowPrototypes: true }` keeps the `constructor` key as an own property (the default parse options drop it), and `JSON.parse(\"{\\\"a\\\":{\\\"constructor\\\":{\\\"isBuffer\\\":\\\"x\\\"}}}\")` produces the same shape with no qs option involved. Express 4 with its default `query parser` setting and body-parser with `extended: true` both call `qs.parse` with `allowPrototypes: true`, so on those stacks `req.query` and `req.body` can carry the shape directly.\u003c/p\u003e\u003cp\u003e#### PoC\u003c/p\u003e\u003cp\u003e```js\u003c/p\u003e\u003cp\u003evar qs = require(\"qs\");\u003c/p\u003e\u003cp\u003eqs.stringify(qs.parse(\"x[constructor][isBuffer]=y\", { plainObjects: true }));\u003c/p\u003e\u003cp\u003eqs.stringify(JSON.parse(\"{\\\"a\\\":{\\\"constructor\\\":{\\\"isBuffer\\\":\\\"x\\\"}}}\"));\u003c/p\u003e\u003cp\u003e// TypeError: obj.constructor.isBuffer is not a function\u003c/p\u003e\u003cp\u003e//     at Object.isBuffer (lib/utils.js:332:78)\u003c/p\u003e\u003cp\u003e//     at stringify (lib/stringify.js:127:45)\u003c/p\u003e\u003cp\u003e```\u003c/p\u003e\u003cp\u003e#### Fix\u003c/p\u003e\u003cp\u003e`lib/utils.js`, applied in e83d321 on `main` and released as v6.16.0:\u003c/p\u003e\u003cp\u003e```diff\u003c/p\u003e\u003cp\u003e- return !!(obj.constructor \u0026amp;\u0026amp; obj.constructor.isBuffer \u0026amp;\u0026amp; obj.constructor.isBuffer(obj));\u003c/p\u003e\u003cp\u003e+ return !!(obj.constructor \u0026amp;\u0026amp; typeof obj.constructor.isBuffer === \"function\" \u0026amp;\u0026amp; obj.constructor.isBuffer(obj));\u003c/p\u003e\u003cp\u003e```\u003c/p\u003e\u003cp\u003eReal `Buffer`, `safer-buffer`, and browserify `buffer` polyfill instances serialize exactly as before; only the throw is removed.\u003c/p\u003e\u003cp\u003e### Affected versions\u003c/p\u003e\u003cp\u003e`\u0026gt;=2.2.5 \u0026lt;6.16.0`, fixed in v6.16.0.\u003c/p\u003e\u003cp\u003eThe unguarded duck-type was introduced in 3768a75 and first shipped in v2.2.5 (September 2014). v2.2.4 and earlier used `Buffer.isBuffer` and are not affected. Every release from v2.2.5 through v6.15.3 contains the unguarded call.\u003c/p\u003e\u003cp\u003e### Impact\u003c/p\u003e\u003cp\u003eAn unauthenticated request can make any code path that re-serializes attacker-influenced data with `qs.stringify` (for example, rebuilding a query string from `req.query` for a redirect or an upstream request, or serializing a parsed JSON body) throw synchronously. In a typical Node.js HTTP framework the throw is caught by the framework error boundary and the affected request returns a 500; the process survives and other requests are unaffected. Where the call runs outside an error boundary, such as an `async` Express 4 handler (where the throw becomes an unhandled promise rejection) or a background job, the process exits, so the impact in that case depends on the application error handling rather than on qs.\u003c/p\u003e"
            }
          ],
          "value": "### Summary\n\n\n\n`qs.stringify` throws a `TypeError` when it serializes an object whose own `constructor` property has a truthy, non-callable `isBuffer` member. `utils.isBuffer` duck-types buffers by calling `obj.constructor.isBuffer(obj)` after checking only that the property is truthy, so a value such as `{ constructor: { isBuffer: \"x\" } }` makes the call throw `TypeError: obj.constructor.isBuffer is not a function`.\n\n\n\n### Details\n\n\n\n`lib/stringify.js:127` calls `utils.isBuffer` on every non-primitive value it serializes. `utils.isBuffer` (`lib/utils.js:332`) reads `obj.constructor.isBuffer` and invokes it without verifying that it is a function. `constructor` and `isBuffer` are ordinary property names, so any object carrying them as own properties reaches the unchecked call.\n\n\n\nSuch an object can be built from untrusted input. `qs.parse(\"x[constructor][isBuffer]=y\", { plainObjects: true })` or `{ allowPrototypes: true }` keeps the `constructor` key as an own property (the default parse options drop it), and `JSON.parse(\"{\\\"a\\\":{\\\"constructor\\\":{\\\"isBuffer\\\":\\\"x\\\"}}}\")` produces the same shape with no qs option involved. Express 4 with its default `query parser` setting and body-parser with `extended: true` both call `qs.parse` with `allowPrototypes: true`, so on those stacks `req.query` and `req.body` can carry the shape directly.\n\n\n\n#### PoC\n\n\n\n```js\n\n\n\nvar qs = require(\"qs\");\n\n\n\nqs.stringify(qs.parse(\"x[constructor][isBuffer]=y\", { plainObjects: true }));\n\n\n\nqs.stringify(JSON.parse(\"{\\\"a\\\":{\\\"constructor\\\":{\\\"isBuffer\\\":\\\"x\\\"}}}\"));\n\n\n\n// TypeError: obj.constructor.isBuffer is not a function\n\n\n\n//     at Object.isBuffer (lib/utils.js:332:78)\n\n\n\n//     at stringify (lib/stringify.js:127:45)\n\n\n\n```\n\n\n\n#### Fix\n\n\n\n`lib/utils.js`, applied in e83d321 on `main` and released as v6.16.0:\n\n\n\n```diff\n\n\n\n- return !!(obj.constructor \u0026\u0026 obj.constructor.isBuffer \u0026\u0026 obj.constructor.isBuffer(obj));\n\n\n\n+ return !!(obj.constructor \u0026\u0026 typeof obj.constructor.isBuffer === \"function\" \u0026\u0026 obj.constructor.isBuffer(obj));\n\n\n\n```\n\n\n\nReal `Buffer`, `safer-buffer`, and browserify `buffer` polyfill instances serialize exactly as before; only the throw is removed.\n\n\n\n### Affected versions\n\n\n\n`\u003e=2.2.5 \u003c6.16.0`, fixed in v6.16.0.\n\n\n\nThe unguarded duck-type was introduced in 3768a75 and first shipped in v2.2.5 (September 2014). v2.2.4 and earlier used `Buffer.isBuffer` and are not affected. Every release from v2.2.5 through v6.15.3 contains the unguarded call.\n\n\n\n### Impact\n\n\n\nAn unauthenticated request can make any code path that re-serializes attacker-influenced data with `qs.stringify` (for example, rebuilding a query string from `req.query` for a redirect or an upstream request, or serializing a parsed JSON body) throw synchronously. In a typical Node.js HTTP framework the throw is caught by the framework error boundary and the affected request returns a 500; the process survives and other requests are unaffected. Where the call runs outside an error boundary, such as an `async` Express 4 handler (where the throw becomes an unhandled promise rejection) or a background job, the process exits, so the impact in that case depends on the application error handling rather than on qs."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-248",
              "description": "CWE-248 Uncaught Exception",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-703",
              "description": "CWE-703 Improper Check or Handling of Exceptional Conditions",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-29T23:51:27.634Z",
        "orgId": "7ffcee3d-2c14-4c3e-b844-86c6a321a158",
        "shortName": "harborist"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/ljharb/qs/security/advisories/GHSA-4mjr-xmp4-gh2g"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/ljharb/qs/commit/e83d321ffafb38cf210683ac31714fce6ce1c6c6"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eUpgrade to qs 6.16.0 or later.\u003c/p\u003e"
            }
          ],
          "value": "Upgrade to qs 6.16.0 or later."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "qs.stringify throws TypeError on objects with a non-callable constructor.isBuffer property",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003ePass a `filter` function to `qs.stringify` that drops values carrying an own `constructor` property; it runs before the `isBuffer` check. Alternatively, wrap `qs.stringify` calls on externally influenced objects in try/catch, and avoid `allowPrototypes: true` / `plainObjects: true` when parsed untrusted input is fed back into `qs.stringify`.\u003c/p\u003e"
            }
          ],
          "value": "Pass a `filter` function to `qs.stringify` that drops values carrying an own `constructor` property; it runs before the `isBuffer` check. Alternatively, wrap `qs.stringify` calls on externally influenced objects in try/catch, and avoid `allowPrototypes: true` / `plainObjects: true` when parsed untrusted input is fed back into `qs.stringify`."
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7ffcee3d-2c14-4c3e-b844-86c6a321a158",
    "assignerShortName": "harborist",
    "cveId": "CVE-2026-82417",
    "datePublished": "2026-08-29T23:51:27.634Z",
    "dateReserved": "2026-08-28T23:08:00.460Z",
    "dateUpdated": "2026-08-31T17:08:24.074Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-82562 (GCVE-0-2026-82562)

Vulnerability from cvelistv5 – Published: 2026-08-29 23:58 – Updated: 2026-08-31 17:04

Title

qs.parse does not enforce arrayLimit on comma groups under bracket-push keys when throwOnLimitExceeded is set (incomplete fix for CVE-2026-2391)

Summary

### Summary When `qs.parse` is called with `comma: true` and `throwOnLimitExceeded: true`, a comma-separated value under a bracket-push key (`a[]=1,2,3,4`) is split into an array without being compared against `arrayLimit`, while the same value under a flat key (`a=1,2,3,4`), an indexed key (`a[0]=`), a nested key (`a[b]=`), or a dotted key (`a.b=` with `allowDots`) throws the documented `RangeError`. A single parameter such as `a[]=1,2,2,...` therefore produces an inner array of arbitrary length even though the caller opted into the hard limit. This is the `[]=` key form that the fix for CVE-2026-2391 (qs 6.14.2) did not cover. ### Details In `lib/parse.js`, a comma-separated value under a `[]=` key is split and then wrapped as a single nested element (`val = [val]`, so that each `a[]=x,y` group counts as one element of the outer array). The `arrayLimit` check that 6.14.2 added for comma values runs after that wrap, so for `[]=` parts it only ever saw the wrapper of length 1. 6.15.3 added a pre-split comma count so that an oversized value throws before it is allocated, but gated it on an `isFlatArrayValue` flag that `parseValues` set to `false` for any part containing `[]=`, and did not pass it for object-valued input, so the gap remained. #### PoC ```js var qs = require('qs'); var options = { comma: true, arrayLimit: 3, throwOnLimitExceeded: true }; qs.parse('a=1,2,3,4', options); // RangeError: Array limit exceeded. Only 3 elements allowed in an array. qs.parse('a[]=1,2,3,4', options); // { a: [ [ '1', '2', '3', '4' ] ] } (no throw) qs.parse('a[]=' + '1,'.repeat(1000000) + '1', { comma: true, arrayLimit: 20, throwOnLimitExceeded: true }); // no throw; a 1,000,001-element inner array is allocated ``` #### Fix `lib/parse.js`, applied in 8859c37 on `main` and released as v6.16.0: the `isFlatArrayValue` gate is removed, so every comma-split value is counted against `arrayLimit` before splitting regardless of key form. An in-limit group under `a[]=` still counts as one element of the outer array, and the default (`throwOnLimitExceeded: false`) path is unchanged. ### Affected versions `>=6.14.2 <6.16.0`, fixed in v6.16.0. v6.14.2 introduced `arrayLimit` enforcement for comma values (the fix for CVE-2026-2391) but only for values not under a `[]=` key, and every release from v6.14.2 through v6.15.3 has the same gap. v6.14.0 and v6.14.1, where `throwOnLimitExceeded` exists but does not apply to any comma form, are covered by CVE-2026-2391 rather than this record. Earlier lines (6.7.x through 6.13.x) have `comma` but no `throwOnLimitExceeded`, so there is no hard cap on any comma path to bypass; releases before 6.7.0 have no `comma` option. ### Impact An unauthenticated attacker who can reach an application that parses untrusted query strings or urlencoded bodies with both `comma: true` and `throwOnLimitExceeded: true` (both non-default) can bypass the configured limit with a single `a[]=` parameter and force the parser to allocate an array proportional to the request size. The cost is strictly linear in the attacker-supplied bytes (about 0.1 microseconds and 6 to 7 retained bytes per input byte; the same out-of-memory threshold as the documented default `throwOnLimitExceeded: false` path), so a transport-layer request or body size limit bounds it completely (and node's default maximum HTTP header size of 16 KB already bounds the request line, so multi-megabyte payloads need a body parser). The impact is that an opt-in hard limit fails open on one key spelling, not unbounded allocation from a small input.

Severity

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

6.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-31 17:03 UTC

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

harborist CNA under the redhat root

CNA scorecard B 86/100 over 15 records in the last 180 days details

References

3 references

URL	Tags
https://github.com/ljharb/qs/security/advisories/…	vendor-advisory
https://github.com/ljharb/qs/commit/8859c37470e11…	patch
https://github.com/ljharb/qs/security/advisories/…	related

Impacted products

1 product

Vendor	Product	Version
ljharb	qs	Affected: 6.14.2 , < 6.16.0 (semver)

Credits

Vectrain51 Fcmam5 ljharb

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-82562",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-31T17:03:54.217257Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-31T17:04:14.950Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/ljharb/qs/security/advisories/GHSA-x5fp-wj9c-mxmx"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://npmjs.com/qs",
          "defaultStatus": "unaffected",
          "packageName": "qs",
          "product": "qs",
          "repo": "https://github.com/ljharb/qs",
          "vendor": "ljharb",
          "versions": [
            {
              "lessThan": "6.16.0",
              "status": "affected",
              "version": "6.14.2",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Vectrain51"
        },
        {
          "lang": "en",
          "type": "reporter",
          "value": "Fcmam5"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "ljharb"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e### Summary\u003c/p\u003e\u003cp\u003eWhen `qs.parse` is called with `comma: true` and `throwOnLimitExceeded: true`, a comma-separated value under a bracket-push key (`a[]=1,2,3,4`) is split into an array without being compared against `arrayLimit`, while the same value under a flat key (`a=1,2,3,4`), an indexed key (`a[0]=`), a nested key (`a[b]=`), or a dotted key (`a.b=` with `allowDots`) throws the documented `RangeError`. A single parameter such as `a[]=1,2,2,...` therefore produces an inner array of arbitrary length even though the caller opted into the hard limit. This is the `[]=` key form that the fix for CVE-2026-2391 (qs 6.14.2) did not cover.\u003c/p\u003e\u003cp\u003e### Details\u003c/p\u003e\u003cp\u003eIn `lib/parse.js`, a comma-separated value under a `[]=` key is split and then wrapped as a single nested element (`val = [val]`, so that each `a[]=x,y` group counts as one element of the outer array). The `arrayLimit` check that 6.14.2 added for comma values runs after that wrap, so for `[]=` parts it only ever saw the wrapper of length 1. 6.15.3 added a pre-split comma count so that an oversized value throws before it is allocated, but gated it on an `isFlatArrayValue` flag that `parseValues` set to `false` for any part containing `[]=`, and did not pass it for object-valued input, so the gap remained.\u003c/p\u003e\u003cp\u003e#### PoC\u003c/p\u003e\u003cp\u003e```js\u003c/p\u003e\u003cp\u003evar qs = require(\u0027qs\u0027);\u003c/p\u003e\u003cp\u003evar options = { comma: true, arrayLimit: 3, throwOnLimitExceeded: true };\u003c/p\u003e\u003cp\u003eqs.parse(\u0027a=1,2,3,4\u0027, options);   // RangeError: Array limit exceeded. Only 3 elements allowed in an array.\u003c/p\u003e\u003cp\u003eqs.parse(\u0027a[]=1,2,3,4\u0027, options); // { a: [ [ \u00271\u0027, \u00272\u0027, \u00273\u0027, \u00274\u0027 ] ] }  (no throw)\u003c/p\u003e\u003cp\u003eqs.parse(\u0027a[]=\u0027 + \u00271,\u0027.repeat(1000000) + \u00271\u0027, { comma: true, arrayLimit: 20, throwOnLimitExceeded: true });\u003c/p\u003e\u003cp\u003e// no throw; a 1,000,001-element inner array is allocated\u003c/p\u003e\u003cp\u003e```\u003c/p\u003e\u003cp\u003e#### Fix\u003c/p\u003e\u003cp\u003e`lib/parse.js`, applied in 8859c37 on `main` and released as v6.16.0: the `isFlatArrayValue` gate is removed, so every comma-split value is counted against `arrayLimit` before splitting regardless of key form. An in-limit group under `a[]=` still counts as one element of the outer array, and the default (`throwOnLimitExceeded: false`) path is unchanged.\u003c/p\u003e\u003cp\u003e### Affected versions\u003c/p\u003e\u003cp\u003e`\u0026gt;=6.14.2 \u0026lt;6.16.0`, fixed in v6.16.0.\u003c/p\u003e\u003cp\u003ev6.14.2 introduced `arrayLimit` enforcement for comma values (the fix for CVE-2026-2391) but only for values not under a `[]=` key, and every release from v6.14.2 through v6.15.3 has the same gap. v6.14.0 and v6.14.1, where `throwOnLimitExceeded` exists but does not apply to any comma form, are covered by CVE-2026-2391 rather than this record. Earlier lines (6.7.x through 6.13.x) have `comma` but no `throwOnLimitExceeded`, so there is no hard cap on any comma path to bypass; releases before 6.7.0 have no `comma` option.\u003c/p\u003e\u003cp\u003e### Impact\u003c/p\u003e\u003cp\u003eAn unauthenticated attacker who can reach an application that parses untrusted query strings or urlencoded bodies with both `comma: true` and `throwOnLimitExceeded: true` (both non-default) can bypass the configured limit with a single `a[]=` parameter and force the parser to allocate an array proportional to the request size. The cost is strictly linear in the attacker-supplied bytes (about 0.1 microseconds and 6 to 7 retained bytes per input byte; the same out-of-memory threshold as the documented default `throwOnLimitExceeded: false` path), so a transport-layer request or body size limit bounds it completely (and node\u0027s default maximum HTTP header size of 16 KB already bounds the request line, so multi-megabyte payloads need a body parser). The impact is that an opt-in hard limit fails open on one key spelling, not unbounded allocation from a small input.\u003c/p\u003e"
            }
          ],
          "value": "### Summary\n\n\n\nWhen `qs.parse` is called with `comma: true` and `throwOnLimitExceeded: true`, a comma-separated value under a bracket-push key (`a[]=1,2,3,4`) is split into an array without being compared against `arrayLimit`, while the same value under a flat key (`a=1,2,3,4`), an indexed key (`a[0]=`), a nested key (`a[b]=`), or a dotted key (`a.b=` with `allowDots`) throws the documented `RangeError`. A single parameter such as `a[]=1,2,2,...` therefore produces an inner array of arbitrary length even though the caller opted into the hard limit. This is the `[]=` key form that the fix for CVE-2026-2391 (qs 6.14.2) did not cover.\n\n\n\n### Details\n\n\n\nIn `lib/parse.js`, a comma-separated value under a `[]=` key is split and then wrapped as a single nested element (`val = [val]`, so that each `a[]=x,y` group counts as one element of the outer array). The `arrayLimit` check that 6.14.2 added for comma values runs after that wrap, so for `[]=` parts it only ever saw the wrapper of length 1. 6.15.3 added a pre-split comma count so that an oversized value throws before it is allocated, but gated it on an `isFlatArrayValue` flag that `parseValues` set to `false` for any part containing `[]=`, and did not pass it for object-valued input, so the gap remained.\n\n\n\n#### PoC\n\n\n\n```js\n\n\n\nvar qs = require(\u0027qs\u0027);\n\n\n\nvar options = { comma: true, arrayLimit: 3, throwOnLimitExceeded: true };\n\n\n\nqs.parse(\u0027a=1,2,3,4\u0027, options);   // RangeError: Array limit exceeded. Only 3 elements allowed in an array.\n\n\n\nqs.parse(\u0027a[]=1,2,3,4\u0027, options); // { a: [ [ \u00271\u0027, \u00272\u0027, \u00273\u0027, \u00274\u0027 ] ] }  (no throw)\n\n\n\nqs.parse(\u0027a[]=\u0027 + \u00271,\u0027.repeat(1000000) + \u00271\u0027, { comma: true, arrayLimit: 20, throwOnLimitExceeded: true });\n\n\n\n// no throw; a 1,000,001-element inner array is allocated\n\n\n\n```\n\n\n\n#### Fix\n\n\n\n`lib/parse.js`, applied in 8859c37 on `main` and released as v6.16.0: the `isFlatArrayValue` gate is removed, so every comma-split value is counted against `arrayLimit` before splitting regardless of key form. An in-limit group under `a[]=` still counts as one element of the outer array, and the default (`throwOnLimitExceeded: false`) path is unchanged.\n\n\n\n### Affected versions\n\n\n\n`\u003e=6.14.2 \u003c6.16.0`, fixed in v6.16.0.\n\n\n\nv6.14.2 introduced `arrayLimit` enforcement for comma values (the fix for CVE-2026-2391) but only for values not under a `[]=` key, and every release from v6.14.2 through v6.15.3 has the same gap. v6.14.0 and v6.14.1, where `throwOnLimitExceeded` exists but does not apply to any comma form, are covered by CVE-2026-2391 rather than this record. Earlier lines (6.7.x through 6.13.x) have `comma` but no `throwOnLimitExceeded`, so there is no hard cap on any comma path to bypass; releases before 6.7.0 have no `comma` option.\n\n\n\n### Impact\n\n\n\nAn unauthenticated attacker who can reach an application that parses untrusted query strings or urlencoded bodies with both `comma: true` and `throwOnLimitExceeded: true` (both non-default) can bypass the configured limit with a single `a[]=` parameter and force the parser to allocate an array proportional to the request size. The cost is strictly linear in the attacker-supplied bytes (about 0.1 microseconds and 6 to 7 retained bytes per input byte; the same out-of-memory threshold as the documented default `throwOnLimitExceeded: false` path), so a transport-layer request or body size limit bounds it completely (and node\u0027s default maximum HTTP header size of 16 KB already bounds the request line, so multi-megabyte payloads need a body parser). The impact is that an opt-in hard limit fails open on one key spelling, not unbounded allocation from a small input."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-29T23:58:31.289Z",
        "orgId": "7ffcee3d-2c14-4c3e-b844-86c6a321a158",
        "shortName": "harborist"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/ljharb/qs/security/advisories/GHSA-x5fp-wj9c-mxmx"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/ljharb/qs/commit/8859c37470e11b42b547b275e4e9bd0bc8cc5464"
        },
        {
          "tags": [
            "related"
          ],
          "url": "https://github.com/ljharb/qs/security/advisories/GHSA-w7fw-mjwx-w883"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eUpgrade to qs 6.16.0 or later.\u003c/p\u003e"
            }
          ],
          "value": "Upgrade to qs 6.16.0 or later."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "qs.parse does not enforce arrayLimit on comma groups under bracket-push keys when throwOnLimitExceeded is set (incomplete fix for CVE-2026-2391)",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eBound request and body size at the transport layer (reverse proxy, API gateway, or body parser limit), which caps the cost of this input completely; or disable `comma: true` for untrusted input.\u003c/p\u003e"
            }
          ],
          "value": "Bound request and body size at the transport layer (reverse proxy, API gateway, or body parser limit), which caps the cost of this input completely; or disable `comma: true` for untrusted input."
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7ffcee3d-2c14-4c3e-b844-86c6a321a158",
    "assignerShortName": "harborist",
    "cveId": "CVE-2026-82562",
    "datePublished": "2026-08-29T23:58:31.289Z",
    "dateReserved": "2026-08-29T23:51:36.085Z",
    "dateUpdated": "2026-08-31T17:04:14.950Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-84292 (GCVE-0-2026-84292)

Vulnerability from cvelistv5 – Published: 2026-09-02 20:09 – Updated: 2026-09-03 13:16

Title

fast-uri vulnerable to authority injection via an unvalidated port in serialize

Summary

fast-uri serializes the port component of a URI without validating it. When recomposing the authority, the userinfo and host components are escaped but the port is concatenated verbatim, so a port value that is not a sequence of digits can inject authority delimiters, demoting the intended host to userinfo and pointing the authority at an attacker-controlled host. Both fast-uri and Node's URL read the result back as the attacker's host with no error, so re-validating the built URI does not catch it. This affects applications that build URIs from parts and assign untrusted data to the port component through the serialize, normalize, or equal functions in their object forms. The issue affects fast-uri versions before 2.4.6, from 3.0.0 before 3.1.7, and from 4.0.0 before 4.1.4. It is fixed in 2.4.6, 3.1.7, and 4.1.4, where recomposeAuthority rejects any port that is not a digit sequence per RFC 3986.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-03 13:16 UTC

CWE

CWE-116 - Improper Encoding or Escaping of Output

Assigner

openjs CNA under the redhat root

CNA scorecard C 65/100 over 121 records in the last 180 days details

References

2 references

URL	Tags
https://github.com/fastify/fast-uri/security/advi…
https://cna.openjsf.org/security-advisories.html

Impacted products

1 product

Vendor	Product	Version
fast-uri	fast-uri	Affected: 0 , < 2.4.6 (semver) Unaffected: 2.4.6 (semver) Affected: 3.0.0 , < 3.1.7 (semver) Unaffected: 3.1.7 (semver) Affected: 4.0.0 , < 4.1.4 (semver) Unaffected: 4.1.4 (semver)

Credits

YashvantHange mcollina UlisesGascon

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-84292",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-03T13:16:05.344208Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-03T13:16:25.237Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:npm/fast-uri",
          "product": "fast-uri",
          "vendor": "fast-uri",
          "versions": [
            {
              "lessThan": "2.4.6",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "2.4.6",
              "versionType": "semver"
            },
            {
              "lessThan": "3.1.7",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "3.1.7",
              "versionType": "semver"
            },
            {
              "lessThan": "4.1.4",
              "status": "affected",
              "version": "4.0.0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "4.1.4",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "YashvantHange"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "mcollina"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "UlisesGascon"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "fast-uri serializes the port component of a URI without validating it. When recomposing the authority, the userinfo and host components are escaped but the port is concatenated verbatim, so a port value that is not a sequence of digits can inject authority delimiters, demoting the intended host to userinfo and pointing the authority at an attacker-controlled host. Both fast-uri and Node\u0027s URL read the result back as the attacker\u0027s host with no error, so re-validating the built URI does not catch it. This affects applications that build URIs from parts and assign untrusted data to the port component through the serialize, normalize, or equal functions in their object forms. The issue affects fast-uri versions before 2.4.6, from 3.0.0 before 3.1.7, and from 4.0.0 before 4.1.4. It is fixed in 2.4.6, 3.1.7, and 4.1.4, where recomposeAuthority rejects any port that is not a digit sequence per RFC 3986."
            }
          ],
          "value": "fast-uri serializes the port component of a URI without validating it. When recomposing the authority, the userinfo and host components are escaped but the port is concatenated verbatim, so a port value that is not a sequence of digits can inject authority delimiters, demoting the intended host to userinfo and pointing the authority at an attacker-controlled host. Both fast-uri and Node\u0027s URL read the result back as the attacker\u0027s host with no error, so re-validating the built URI does not catch it. This affects applications that build URIs from parts and assign untrusted data to the port component through the serialize, normalize, or equal functions in their object forms. The issue affects fast-uri versions before 2.4.6, from 3.0.0 before 3.1.7, and from 4.0.0 before 4.1.4. It is fixed in 2.4.6, 3.1.7, and 4.1.4, where recomposeAuthority rejects any port that is not a digit sequence per RFC 3986."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-116",
              "description": "CWE-116: Improper Encoding or Escaping of Output",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-02T20:09:51.415Z",
        "orgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
        "shortName": "openjs"
      },
      "references": [
        {
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-qw65-cvwx-89v3"
        },
        {
          "url": "https://cna.openjsf.org/security-advisories.html"
        }
      ],
      "title": "fast-uri vulnerable to authority injection via an unvalidated port in serialize",
      "x_generator": {
        "engine": "cve-kit 1.0.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
    "assignerShortName": "openjs",
    "cveId": "CVE-2026-84292",
    "datePublished": "2026-09-02T20:09:51.415Z",
    "dateReserved": "2026-09-01T16:10:49.688Z",
    "dateUpdated": "2026-09-03T13:16:25.237Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-84375 (GCVE-0-2026-84375)

Vulnerability from cvelistv5 – Published: 2026-09-01 21:43 – Updated: 2026-09-28 21:32

Title

js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources

Summary

js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 until 3.15.2, 4.3.2, and 5.4.1, maxTotalMergeKeys in lib/js-yaml/loader.js and lib/loader.js does not count empty mapping sources while processing the merge key <<. An attacker can alias a large sequence of empty mappings into many merge targets, causing O(N * K) processing while totalMergeKeys remains unchanged and the configured resource limit is never reached. A relatively small YAML document can therefore cause prolonged CPU consumption in applications that parse untrusted YAML, and merge processing is enabled by default on these release lines. In v3 & v4, merge is enabled by default so the severity score is higher. This issue is fixed in versions 3.15.2, 4.3.2, and 5.4.1.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-02 13:43 UTC

CWE

CWE-400 - Uncontrolled Resource Consumption
CWE-407 - Inefficient Algorithmic Complexity

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 8029 records in the last 180 days details

References

8 references

URL	Tags
https://github.com/nodeca/js-yaml/security/adviso…	x_refsource_CONFIRM
https://github.com/nodeca/js-yaml/pull/797	x_refsource_MISC
https://github.com/nodeca/js-yaml/commit/3485bc06…	x_refsource_MISC
https://github.com/nodeca/js-yaml/commit/6a8e05f9…	x_refsource_MISC
https://github.com/nodeca/js-yaml/commit/d90b6612…	x_refsource_MISC
https://github.com/nodeca/js-yaml/releases/tag/3.15.2	x_refsource_MISC
https://github.com/nodeca/js-yaml/releases/tag/4.3.2	x_refsource_MISC
https://github.com/nodeca/js-yaml/releases/tag/5.4.1	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
nodeca	js-yaml	Affected: >= 3.0.0, < 3.15.2 Affected: >= 4.0.0, < 4.3.2 Affected: >= 5.0.0, < 5.4.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-84375",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-02T13:43:50.850378Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-02T16:02:06.745Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "js-yaml",
          "vendor": "nodeca",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 3.0.0, \u003c 3.15.2"
            },
            {
              "status": "affected",
              "version": "\u003e= 4.0.0, \u003c 4.3.2"
            },
            {
              "status": "affected",
              "version": "\u003e= 5.0.0, \u003c 5.4.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 until 3.15.2, 4.3.2, and 5.4.1, maxTotalMergeKeys in lib/js-yaml/loader.js and lib/loader.js does not count empty mapping sources while processing the merge key \u003c\u003c. An attacker can alias a large sequence of empty mappings into many merge targets, causing O(N * K) processing while totalMergeKeys remains unchanged and the configured resource limit is never reached. A relatively small YAML document can therefore cause prolonged CPU consumption in applications that parse untrusted YAML, and merge processing is enabled by default on these release lines. In v3 \u0026 v4, merge is enabled by default so the severity score is higher. This issue is fixed in versions 3.15.2, 4.3.2, and 5.4.1."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-407",
              "description": "CWE-407: Inefficient Algorithmic Complexity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-28T21:32:39.387Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-2883-xcg3-v3hh",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-2883-xcg3-v3hh"
        },
        {
          "name": "https://github.com/nodeca/js-yaml/pull/797",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/nodeca/js-yaml/pull/797"
        },
        {
          "name": "https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639"
        },
        {
          "name": "https://github.com/nodeca/js-yaml/commit/6a8e05f9a485188ed730ac81e81ae221352ef480",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/nodeca/js-yaml/commit/6a8e05f9a485188ed730ac81e81ae221352ef480"
        },
        {
          "name": "https://github.com/nodeca/js-yaml/commit/d90b6612a5a84385bdcb556c44578eac76dc0f6b",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/nodeca/js-yaml/commit/d90b6612a5a84385bdcb556c44578eac76dc0f6b"
        },
        {
          "name": "https://github.com/nodeca/js-yaml/releases/tag/3.15.2",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/nodeca/js-yaml/releases/tag/3.15.2"
        },
        {
          "name": "https://github.com/nodeca/js-yaml/releases/tag/4.3.2",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/nodeca/js-yaml/releases/tag/4.3.2"
        },
        {
          "name": "https://github.com/nodeca/js-yaml/releases/tag/5.4.1",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/nodeca/js-yaml/releases/tag/5.4.1"
        }
      ],
      "source": {
        "advisory": "GHSA-2883-xcg3-v3hh",
        "discovery": "UNKNOWN"
      },
      "title": "js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-84375",
    "datePublished": "2026-09-01T21:43:13.617Z",
    "dateReserved": "2026-09-01T16:27:58.129Z",
    "dateUpdated": "2026-09-28T21:32:39.387Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-84394 (GCVE-0-2026-84394)

Vulnerability from cvelistv5 – Published: 2026-09-02 20:25 – Updated: 2026-09-03 13:14

Title

fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority

Summary

fast-uri accepts a host that contains an unbalanced or misplaced authority bracket without reporting an error. A host that starts with an opening bracket but does not end with a closing bracket is neither validated as an IP literal nor canonicalized as a domain name, so parse() returns it as the host with error undefined, while Node's URL and the HTTP clients built on it resolve the same string to a different host. An application that reads the parsed host to make a host decision, such as an SSRF denylist, a redirect allowlist, or proxy routing, and then passes the original URL to an HTTP client evaluates its policy against a string that is not the host the request reaches. The same host is carried through normalize, equal, and resolve. This affects fast-uri versions 2.4.5, 3.1.6, and 4.1.3, and is fixed in 2.4.6, 3.1.7, and 4.1.4, where parse() reports a malformed host for any host that contains a bracket but is not a valid IPv6 literal.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-03 13:14 UTC

CWE

CWE-436 - Interpretation Conflict

Assigner

openjs CNA under the redhat root

CNA scorecard C 65/100 over 121 records in the last 180 days details

References

2 references

URL	Tags
https://github.com/fastify/fast-uri/security/advi…
https://cna.openjsf.org/security-advisories.html

Impacted products

1 product

Vendor	Product	Version
fast-uri	fast-uri	Affected: 2.4.5 , < 2.4.6 (semver) Unaffected: 2.4.6 (semver) Affected: 3.1.6 , < 3.1.7 (semver) Unaffected: 3.1.7 (semver) Affected: 4.1.3 , < 4.1.4 (semver) Unaffected: 4.1.4 (semver)

Credits

YashvantHange mcollina UlisesGascon

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-84394",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-03T13:14:34.742806Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-03T13:14:42.123Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:npm/fast-uri",
          "product": "fast-uri",
          "vendor": "fast-uri",
          "versions": [
            {
              "lessThan": "2.4.6",
              "status": "affected",
              "version": "2.4.5",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "2.4.6",
              "versionType": "semver"
            },
            {
              "lessThan": "3.1.7",
              "status": "affected",
              "version": "3.1.6",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "3.1.7",
              "versionType": "semver"
            },
            {
              "lessThan": "4.1.4",
              "status": "affected",
              "version": "4.1.3",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "4.1.4",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "YashvantHange"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "mcollina"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "UlisesGascon"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "fast-uri accepts a host that contains an unbalanced or misplaced authority bracket without reporting an error. A host that starts with an opening bracket but does not end with a closing bracket is neither validated as an IP literal nor canonicalized as a domain name, so parse() returns it as the host with error undefined, while Node\u0027s URL and the HTTP clients built on it resolve the same string to a different host. An application that reads the parsed host to make a host decision, such as an SSRF denylist, a redirect allowlist, or proxy routing, and then passes the original URL to an HTTP client evaluates its policy against a string that is not the host the request reaches. The same host is carried through normalize, equal, and resolve. This affects fast-uri versions 2.4.5, 3.1.6, and 4.1.3, and is fixed in 2.4.6, 3.1.7, and 4.1.4, where parse() reports a malformed host for any host that contains a bracket but is not a valid IPv6 literal."
            }
          ],
          "value": "fast-uri accepts a host that contains an unbalanced or misplaced authority bracket without reporting an error. A host that starts with an opening bracket but does not end with a closing bracket is neither validated as an IP literal nor canonicalized as a domain name, so parse() returns it as the host with error undefined, while Node\u0027s URL and the HTTP clients built on it resolve the same string to a different host. An application that reads the parsed host to make a host decision, such as an SSRF denylist, a redirect allowlist, or proxy routing, and then passes the original URL to an HTTP client evaluates its policy against a string that is not the host the request reaches. The same host is carried through normalize, equal, and resolve. This affects fast-uri versions 2.4.5, 3.1.6, and 4.1.3, and is fixed in 2.4.6, 3.1.7, and 4.1.4, where parse() reports a malformed host for any host that contains a bracket but is not a valid IPv6 literal."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-436",
              "description": "CWE-436: Interpretation Conflict",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-02T20:25:35.399Z",
        "orgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
        "shortName": "openjs"
      },
      "references": [
        {
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-58mr-gqgx-xq4g"
        },
        {
          "url": "https://cna.openjsf.org/security-advisories.html"
        }
      ],
      "title": "fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority",
      "x_generator": {
        "engine": "cve-kit 1.0.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
    "assignerShortName": "openjs",
    "cveId": "CVE-2026-84394",
    "datePublished": "2026-09-02T20:25:35.399Z",
    "dateReserved": "2026-09-01T16:42:27.072Z",
    "dateUpdated": "2026-09-03T13:14:42.123Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:90321

CVE-2026-75838 (GCVE-0-2026-75838)

CVE-2026-75899 (GCVE-0-2026-75899)

CVE-2026-75931 (GCVE-0-2026-75931)

CVE-2026-76169 (GCVE-0-2026-76169)

CVE-2026-81521 (GCVE-0-2026-81521)

CVE-2026-82417 (GCVE-0-2026-82417)

CVE-2026-82562 (GCVE-0-2026-82562)

CVE-2026-84292 (GCVE-0-2026-84292)

CVE-2026-84375 (GCVE-0-2026-84375)

CVE-2026-84394 (GCVE-0-2026-84394)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour