Product by Red Hat

    Red Hat Openshift Dev Spaces

    19 known vulnerabilities in Red Hat Openshift Dev Spaces (Red Hat), 0 of them actively exploited (CISA KEV).

    Key figures

    19

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Red Hat Openshift Dev Spaces (Red Hat)
    HighCVE-2024-1394

    Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads

    also in 33 other products

    7.5
    HighCVE-2026-0603

    Org.hibernate/hibernate-core: SQL Injection

    also in 21 other products

    8.3
    HighCVE-2024-3727

    Containers/image: digest type does not guarantee valid type

    also in 24 other products

    8.3
    HighCVE-2026-87743

    Quarkus-vertx-http: authorization bypass via path normalization discrepancy in quarkus http security

    also in 10 other products

    7.5
    HighCVE-2026-76235

    Red Hat: Missing Release of Memory after Effective Lifetime

    also in 5 other products

    7.5
    CriticalCVE-2026-107935

    Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose

    also in 7 other products

    9.3
    HighCVE-2026-91149

    Cockpit: cockpit: denial of service via unbounded connection thread spawning

    also in 4 other products

    7.5
    MediumCVE-2024-11831

    Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript

    also in 38 other products

    5.4
    MediumCVE-2025-11395

    Podman: arbitrary file write when importing oci archive

    also in 5 other products

    5.5
    MediumCVE-2026-91147

    Red Hat: Reachable Assertion

    also in 4 other products

    5.9
    MediumCVE-2024-9355

    Golang-fips: golang fips zeroed buffer

    also in 30 other products

    6.5
    MediumCVE-2026-79705

    Red Hat: Path Traversal

    also in 8 other products

    4.5
    MediumCVE-2025-11065

    Github.com/go-viper/mapstructure/v2: Generation of Error Message Containing Sensitive Information

    also in 12 other products

    5.3
    MediumCVE-2026-19730

    podman quadlet install --replace does not fully replace the old file

    also in 14 other products

    4.2
    MediumCVE-2026-79699

    Red Hat: Link Following

    also in 8 other products

    4.4
    LowCVE-2026-114236

    Red Hat Confidential Compute Attestation: Missing Release of Resource after Effective Lifetime

    also in 16 other products

    3.3
    LowCVE-2026-91142

    Cockpit: cockpit: unauthorized modification of login records via integer overflow

    also in 4 other products

    3.6
    MediumCVE-2025-14969

    Red Hat: Missing Release of Resource after Effective Lifetime

    also in 2 other products

    4.3
    MediumCVE-2025-57850

    Codeready-ws: privilege escalation via excessive /etc/passwd permissions

    6.4

    All products by Red Hat