Known vulnerabilities in Red Hat OpenShift Dev Spaces

Vendor: Red Hat Inc.
Software: Red Hat OpenShift Dev Spaces
Software CPE: cpe:2.3:a:red_hat:red_hat_openshift_dev_spaces:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 725
Public exploits: 26
Known exploited (KEV): 7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenShift Dev Spaces Red Hat OpenShift Dev Spaces is affected by 725 known vulnerabilities: 3 critical, 51 high, 136 medium, 535 low Critical High Medium Low

Vulnerabilities (725)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139082 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-6321		 CWE-22 Medium
No
No
 3.28.2 22.07.2026 SB2026072227
SB2026072228
SB2026072229
and 13 more
#VU135077 - Authentication Bypass by Capture-replay
CVE-2026-8927		 CWE-294 Low
No
No
 3.30.1 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 17 more
#VU135076 - Exposure of Data Element to Wrong Session
CVE-2026-8458		 CWE-488 Low
No
No
 3.30.1 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 16 more
#VU131180 - Improper Authentication
CVE-2026-43512		 CWE-287 Medium
Available
No
 3.28.2 12.05.2026 SB2026051281
SB2026051592
SB2026052607
and 30 more
#VU130215 - Resource exhaustion
CVE-2026-42587		 CWE-400 Medium
No
No
 3.28.2 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 19 more
#VU130214 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42581		 CWE-444 Medium
No
No
 3.28.2 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 18 more
#VU130212 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-42578		 CWE-113 Medium
No
No
 3.28.2 05.05.2026 SB20260505124
SB2026051907
SB20260528254
and 9 more
#VU130208 - Null Byte Interaction Error (Poison Null Byte)
CVE-2026-42579		 CWE-626 Medium
No
No
 3.28.2 05.05.2026 SB20260505124
SB2026060936
SB2026060963
and 11 more
#VU130205 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42584		 CWE-444 Medium
No
No
 3.28.2 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 18 more
#VU106282 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-12905		 CWE-59 High
No
No
 3.20.0, 3.21.0 31.03.2025 SB2025033140
SB2025033150
SB2025033151
and 15 more
#VU105983 - Resource exhaustion
CVE-2025-30204		 CWE-400 Medium
No
No
 3.21.0 24.03.2025 SB2025032475
SB2025032730
SB2025040333
and 97 more
#VU105459 - Resource exhaustion
CVE-2025-22869		 CWE-400 Low
No
No
 3.20.0, 3.21.0 10.03.2025 SB2025031011
SB2025031015
SB2025032557
and 108 more
#VU101777 - Improper Authorization
CVE-2024-45337		 CWE-285 Medium
Available
No
 3.18.0, 3.21.0 13.12.2024 SB2024121332
SB2024121333
SB2024121334
and 93 more
#VU99182 - Incorrect Calculation
CVE-2022-49014		 CWE-682 Low
No
No
 3.21.0 22.10.2024 SB20241022294
SB2024111334
SB2024112835
and 24 more
#VU99161 - Resource Management Errors
CVE-2022-49029		 CWE-399 Low
No
No
 3.21.0 22.10.2024 SB20241022273
SB2024110169
SB2024110170
and 10 more
#VU99138 - Resource Management Errors
CVE-2022-48989		 CWE-399 Low
No
No
 3.21.0 22.10.2024 SB20241022250
SB2024121505
SB2024121752
and 3 more
#VU99131 - Resource Management Errors
CVE-2022-48969		 CWE-399 Low
No
No
 3.21.0 22.10.2024 SB20241022243
SB2024111334
SB2024112835
and 8 more
#VU99119 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-49006		 CWE-835 Low
No
No
 3.21.0 22.10.2024 SB20241022231
SB2024110169
SB2024111334
and 9 more
#VU129661 - Insufficient Verification of Data Authenticity
CVE-2024-45410		 CWE-345 High
No
No
 3.21.0 19.09.2024 SB2024091971
SB2026050538
#VU80506 - Use After Free
CVE-2023-4752		 CWE-416 Low
No
No
 3.21.0 06.09.2023 SB2023090645
SB2023090649
SB2023090650
and 32 more


Showing elements 1 - 20 out of 725