Known vulnerabilities in Red Hat OpenShift Dev Spaces

Vendor: Red Hat Inc.
Software: Red Hat OpenShift Dev Spaces
Software CPE: cpe:2.3:a:red_hat:red_hat_openshift_dev_spaces:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 723
Public exploits: 26
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenShift Dev Spaces Red Hat OpenShift Dev Spaces is affected by 723 known vulnerabilities: 3 critical, 51 high, 136 medium, 533 low Critical High Medium Low

Vulnerabilities (723)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139082 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-6321		 CWE-22 Medium
No
No
 3.28.2 22.07.2026 SB2026072227
SB2026072228
SB2026072229
and 5 more
#VU131180 - Improper Authentication
CVE-2026-43512		 CWE-287 Medium
Available
No
 3.28.2 12.05.2026 SB2026051281
SB2026051592
SB2026052607
and 20 more
#VU130215 - Resource exhaustion
CVE-2026-42587		 CWE-400 Medium
No
No
 3.28.2 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 11 more
#VU130214 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42581		 CWE-444 Medium
No
No
 3.28.2 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 11 more
#VU130212 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-42578		 CWE-113 Medium
No
No
 3.28.2 05.05.2026 SB20260505124
SB2026051907
SB20260528254
and 6 more
#VU130208 - Null Byte Interaction Error (Poison Null Byte)
CVE-2026-42579		 CWE-626 Medium
No
No
 3.28.2 05.05.2026 SB20260505124
SB2026060936
SB2026060963
and 6 more
#VU130205 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42584		 CWE-444 Medium
No
No
 3.28.2 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 12 more
#VU105983 - Resource exhaustion
CVE-2025-30204		 CWE-400 Medium
No
No
 3.21.0 24.03.2025 SB2025032475
SB2025032730
SB2025040333
and 97 more
#VU103980 - Resource exhaustion
CVE-2024-12133		 CWE-400 Medium
No
No
 3.21.0 14.02.2025 SB2025021428
SB2025021429
SB2025021430
and 78 more
#VU102736 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12088		 CWE-22 Medium
No
No
 3.21.0 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 65 more
#VU102734 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12087		 CWE-22 Medium
No
No
 3.21.0 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 74 more
#VU99182 - Incorrect Calculation
CVE-2022-49014		 CWE-682 Low
No
No
 3.21.0 22.10.2024 SB20241022294
SB2024111334
SB2024112835
and 24 more
#VU99161 - Resource Management Errors
CVE-2022-49029		 CWE-399 Low
No
No
 3.21.0 22.10.2024 SB20241022273
SB2024110169
SB2024110170
and 10 more
#VU99138 - Resource Management Errors
CVE-2022-48989		 CWE-399 Low
No
No
 3.21.0 22.10.2024 SB20241022250
SB2024121505
SB2024121752
and 3 more
#VU99131 - Resource Management Errors
CVE-2022-48969		 CWE-399 Low
No
No
 3.21.0 22.10.2024 SB20241022243
SB2024111334
SB2024112835
and 8 more
#VU99119 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-49006		 CWE-835 Low
No
No
 3.21.0 22.10.2024 SB20241022231
SB2024110169
SB2024111334
and 9 more
#VU98973 - NULL Pointer Dereference
CVE-2023-52917		 CWE-476 Low
No
No
 3.21.0 22.10.2024 SB2024102285
SB2024110167
SB2024110169
and 36 more
#VU129661 - Insufficient Verification of Data Authenticity
CVE-2024-45410		 CWE-345 High
No
No
 3.21.0 19.09.2024 SB2024091971
SB2026050538
#VU92024 - Improper Locking
CVE-2023-52672		 CWE-667 Low
No
No
 3.21.0 13.06.2024 SB2024061329
SB2024070462
SB2024070474
and 12 more
#VU80506 - Use After Free
CVE-2023-4752		 CWE-416 Low
No
No
 3.21.0 06.09.2023 SB2023090645
SB2023090649
SB2023090650
and 32 more


Showing elements 1 - 20 out of 723