Product by Red Hat
Red Hat Openshift Dev Spaces
19 known vulnerabilities in Red Hat Openshift Dev Spaces (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
19
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-1394 | Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads | 7.5 | |
| High | CVE-2026-0603 | Org.hibernate/hibernate-core: SQL Injection | 8.3 | |
| High | CVE-2024-3727 | Containers/image: digest type does not guarantee valid type | 8.3 | |
| High | CVE-2026-87743 | Quarkus-vertx-http: authorization bypass via path normalization discrepancy in quarkus http security | 7.5 | |
| High | CVE-2026-76235 | Red Hat: Missing Release of Memory after Effective Lifetime | 7.5 | |
| Critical | CVE-2026-107935 | Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose | 9.3 | |
| High | CVE-2026-91149 | Cockpit: cockpit: denial of service via unbounded connection thread spawning | 7.5 | |
| Medium | CVE-2024-11831 | Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript | 5.4 | |
| Medium | CVE-2025-11395 | Podman: arbitrary file write when importing oci archive | 5.5 | |
| Medium | CVE-2026-91147 | Red Hat: Reachable Assertion | 5.9 | |
| Medium | CVE-2024-9355 | Golang-fips: golang fips zeroed buffer | 6.5 | |
| Medium | CVE-2026-79705 | Red Hat: Path Traversal | 4.5 | |
| Medium | CVE-2025-11065 | Github.com/go-viper/mapstructure/v2: Generation of Error Message Containing Sensitive Information | 5.3 | |
| Medium | CVE-2026-19730 | podman quadlet install --replace does not fully replace the old file | 4.2 | |
| Medium | CVE-2026-79699 | Red Hat: Link Following | 4.4 | |
| Low | CVE-2026-114236 | Red Hat Confidential Compute Attestation: Missing Release of Resource after Effective Lifetime | 3.3 | |
| Low | CVE-2026-91142 | Cockpit: cockpit: unauthorized modification of login records via integer overflow | 3.6 | |
| Medium | CVE-2025-14969 | Red Hat: Missing Release of Resource after Effective Lifetime | 4.3 | |
| Medium | CVE-2025-57850 | Codeready-ws: privilege escalation via excessive /etc/passwd permissions | 6.4 |