Skip to content
Redhat Developer Hub vulnerabilities
-
axios, red hat cryostat 4, gatekeeper 3 +79 more +81 more
Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge
CVE-2026-44495
Fix available
7.0 High
-
immutable-js immutable, immutable-js, red hat cluster observability operator 1.5.0 +90 more +92 more
Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable
CVE-2026-29063
Fix available
8.7 High
-
redhat developer hub, red hat developer hub 1.8, developer hub 1.9 +2 more
Rhdh: graphql injection leading to platform-wide denial of service (dos) in rh developer hub orchestrator plugin
CVE-2026-3118
6.5 Medium
-
nodemailer, red hat advanced cluster management for kubernetes 2, ceph storage 8 +4 more +6 more
Nodemailer: nodemailer: denial of service via crafted email address header
CVE-2025-14874
Fix available
7.5 High
-
redhat red hat developer hub, linuxfoundation backstage, red hat rhdh-1.1-rhel-9 +2 more
Rhdh: catalog-import function leaks credentials to frontend
CVE-2023-6944
Fix available
5.7 Medium