Redhat Advanced Cluster Security vulnerabilities

• axios, red hat cryostat 4, gatekeeper 3 +79 more +81 more Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge CVE-2026-44495 Fix available 7.0 HighMay 29, 2026
• immutable-js immutable, immutable-js, red hat cluster observability operator 1.5.0 +90 more +92 more Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable CVE-2026-29063 Fix available 8.7 HighMarch 4, 2026
• stackrox, red hat advanced cluster security 4, redhat advanced cluster security +2 more Stackrox: xss in stackrox CVE-2025-5198 5.0 MediumMay 27, 2025
• mholt archiver, red hat advanced cluster security 3, advanced cluster security 4 +3 more +5 more Mholt/archiver: path traversal vulnerability CVE-2024-0406 Public exploitFix available 6.1 MediumApril 6, 2024
• 9bis kitty, apache sshd, sshj +68 more +70 more Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin CVE-2023-48795 Public exploitFix available EPSS 93.5% 5.9 MediumDecember 18, 2023
• redhat advanced cluster security, red hat advanced cluster security 3, advanced cluster security 4.2 +2 more Stackrox: missing http security headers allows for clickjacking in web ui CVE-2023-4958 6.1 MediumDecember 12, 2023
• eclipse jetty, ietf http, http/2 +166 more +168 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2023-44487 In KEVPublic exploitFix available EPSS 100.0% 7.5 HighJuly 10, 2023
• redhat advanced cluster security A flaw was found in the Red Hat Advanced Cluster Security for Kubernetes. Notifier secrets were... CVE-2022-1902 8.8 HighSeptember 1, 2022