Known vulnerabilities in Red Hat OpenShift Dev Spaces - page 20

Vendor: Red Hat Inc.
Software: Red Hat OpenShift Dev Spaces
Software CPE: cpe:2.3:a:red_hat:red_hat_openshift_dev_spaces:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 723
Public exploits: 26
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenShift Dev Spaces Red Hat OpenShift Dev Spaces is affected by 723 known vulnerabilities: 3 critical, 51 high, 136 medium, 533 low Critical High Medium Low

Vulnerabilities (723)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU120001 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-61927		 CWE-94 High
No
No
 3.25.0 16.12.2025 SB2025121630
SB2025121638
#VU119113 - Missing Authentication for Critical Function
CVE-2025-12548		 CWE-306 Critical
Available
Exploited
 3.22.1, 3.23.1, 3.24.1 03.12.2025 SB2025120346
SB2025120401
#VU117681 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-55752		 CWE-22 High
Available
No
 3.25.0 27.10.2025 SB2025102748
SB20251031122
SB20251031123
and 43 more
#VU117332 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-59343		 CWE-22 High
No
No
 3.24.0 17.10.2025 SB2025101702
SB2025101703
SB2025101704
and 22 more
#VU117273 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-55247		 CWE-59 Low
No
No
 3.25.0 15.10.2025 SB20251015122
SB20251015138
SB20251015139
and 9 more
#VU117236 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-55315		 CWE-444 Medium
Available
No
 3.25.0 15.10.2025 SB2025101593
SB20251015138
SB20251015139
and 9 more
#VU117231 - Inadequate Encryption Strength
CVE-2025-55248		 CWE-326 Medium
No
No
 3.25.0 15.10.2025 SB2025101588
SB20251015138
SB20251015139
and 9 more
#VU115573 - Protection Mechanism Failure
CVE-2025-41249		 CWE-693 Medium
No
No
 3.24.0 16.09.2025 SB20250916314
SB2025100741
SB20251008143
and 62 more
#VU115570 - Protection Mechanism Failure
CVE-2025-41248		 CWE-693 Medium
No
No
 3.24.0 16.09.2025 SB20250916313
SB2025100741
SB20251008143
and 33 more
#VU114987 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-9566		 CWE-59 Low
No
No
 3.24.0 08.09.2025 SB20250908111
SB20250908113
SB20250908114
and 25 more
#VU114385 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-54988		 CWE-611 Medium
Available
No
 3.25.0 22.08.2025 SB2025082219
SB2025083007
SB2025083008
and 31 more
#VU114026 - Resource exhaustion
CVE-2025-55163		 CWE-400 Medium
No
No
 3.24.0 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 70 more
#VU107521 - Improper input validation
CVE-2025-30698		 CWE-20 Medium
No
No
 3.21.0 16.04.2025 SB20250416145
SB20250416146
SB20250416147
and 93 more
#VU107522 - Improper input validation
CVE-2025-30691		 CWE-20 Medium
No
No
 3.21.0 16.04.2025 SB20250416146
SB20250416159
SB2025042933
and 33 more
#VU105461 - Resource exhaustion
CVE-2025-22868		 CWE-400 Medium
No
No
 3.20.0 10.03.2025 SB2025031013
SB2025031015
SB2025031076
and 89 more
#VU104035 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2025-26465		 CWE-300 Medium
No
No
 3.21.0 18.02.2025 SB2025021815
SB2025021830
SB2025021833
and 49 more
#VU92406 - Incorrect Regular Expression
CVE-2024-4067		 CWE-185 Medium
No
No
 3.25.0 20.06.2024 SB20240620121
SB2024062832
SB2024070501
and 41 more
#VU78932 - Incorrect Regular Expression
CVE-2022-25883		 CWE-185 Medium
No
No
 3.24.0 03.08.2023 SB2023080361
SB2023080362
SB2023081514
and 73 more
#VU69942 - Incorrect Regular Expression
CVE-2022-3517		 CWE-185 Medium
No
No
 3.24.0 06.12.2022 SB2022120638
SB2022120639
SB2022120640
and 48 more
#VU55102 - Resource exhaustion
CVE-2021-35065		 CWE-400 Medium
No
No
 3.24.0 21.07.2021 SB2021072101
SB2023020668
SB2023020971
and 24 more


Showing elements 381 - 400 out of 723