Known vulnerabilities in Red Hat OpenShift Dev Spaces - page 21

Vendor: Red Hat Inc.
Software: Red Hat OpenShift Dev Spaces
Software CPE: cpe:2.3:a:red_hat:red_hat_openshift_dev_spaces:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 725
Public exploits: 26
Known exploited (KEV): 7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenShift Dev Spaces Red Hat OpenShift Dev Spaces is affected by 725 known vulnerabilities: 3 critical, 51 high, 136 medium, 535 low Critical High Medium Low

Vulnerabilities (725)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119113 - Missing Authentication for Critical Function
CVE-2025-12548		 CWE-306 Critical
Available
Exploited
 3.22.1, 3.23.1, 3.24.1 03.12.2025 SB2025120346
SB2025120401
#VU117332 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-59343		 CWE-22 High
No
No
 3.24.0 17.10.2025 SB2025101702
SB2025101703
SB2025101704
and 22 more
#VU115573 - Protection Mechanism Failure
CVE-2025-41249		 CWE-693 Medium
No
No
 3.24.0 16.09.2025 SB20250916314
SB2025100741
SB20251008143
and 63 more
#VU115570 - Protection Mechanism Failure
CVE-2025-41248		 CWE-693 Medium
No
No
 3.24.0 16.09.2025 SB20250916313
SB2025100741
SB20251008143
and 34 more
#VU114987 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-9566		 CWE-59 Low
No
No
 3.24.0 08.09.2025 SB20250908111
SB20250908113
SB20250908114
and 25 more
#VU114026 - Resource exhaustion
CVE-2025-55163		 CWE-400 Medium
No
No
 3.24.0 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 71 more
#VU105973 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-23207		 CWE-79 Low
No
No
 3.19.0 24.03.2025 SB2025032441
SB2025032442
#VU105715 - Out-of-bounds write
CVE-2025-27363		 CWE-787 Critical
Available
Exploited
 3.20.0 14.03.2025 SB2025031402
SB2025031502
SB2025031750
and 97 more
#VU105548 - Out-of-bounds write
CVE-2025-24201		 CWE-787 Critical
Available
Exploited
 3.20.0 11.03.2025 SB2025031182
SB2025031183
SB2025031185
and 41 more
#VU105461 - Resource exhaustion
CVE-2025-22868		 CWE-400 Medium
No
No
 3.20.0 10.03.2025 SB2025031013
SB2025031015
SB2025031076
and 89 more
#VU105450 - Resource exhaustion
CVE-2025-27144		 CWE-400 Medium
No
No
 3.20.0 07.03.2025 SB2025030735
SB2025030736
SB2025030737
and 80 more
#VU104117 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-1244		 CWE-78 High
No
No
 3.20.0 21.02.2025 SB2025022110
SB2025022111
SB2025022112
and 31 more
#VU104099 - Use After Free
CVE-2024-56171		 CWE-416 High
No
No
 3.20.0 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU104098 - Stack-based buffer overflow
CVE-2025-24928		 CWE-121 High
No
No
 3.20.0 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU96945 - Resource exhaustion
CVE-2024-7592		 CWE-400 Medium
No
No
 3.20.0 09.09.2024 SB2024090916
SB2024090917
SB2024090918
and 72 more
#VU96147 - Improper Locking
CVE-2024-43855		 CWE-667 Low
No
No
 3.20.0 19.08.2024 SB2024081988
SB2024091080
SB20240910112
and 23 more
#VU78932 - Incorrect Regular Expression
CVE-2022-25883		 CWE-185 Medium
No
No
 3.24.0 03.08.2023 SB2023080361
SB2023080362
SB2023081514
and 73 more
#VU71577 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-46175		 CWE-94 Medium
No
No
 3.15.0, 3.24.0 26.01.2023 SB2023012644
SB2023012645
SB2023013117
and 46 more
#VU69942 - Incorrect Regular Expression
CVE-2022-3517		 CWE-185 Medium
No
No
 3.24.0 06.12.2022 SB2022120638
SB2022120639
SB2022120640
and 50 more
#VU55102 - Resource exhaustion
CVE-2021-35065		 CWE-400 Medium
No
No
 3.24.0 21.07.2021 SB2021072101
SB2023020668
SB2023020971
and 24 more


Showing elements 401 - 420 out of 725