OD
Product
OpenShift Developer Tools and Services 4.17
12
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 9Medium 2Low 0
Watch
Add OpenShift Developer Tools and Services 4.17 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-53435 | 8.8 | Jun 10 | In Jenkins 2.567 and earlier, LTS 2.555.2 and earlier, it is possible for attackers to have Jenkins deserialize arbitrary types defined in Jenkins core or plugins from an… Affected: All versions, or not specified |
| CVE-2025-67030 | 8.8 | Mar 25 | Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642 Affected: All versions, or not specified |
| CVE-2026-33001 | 8.8 | Mar 18 | Jenkins 2.554 and earlier, LTS 2.541.2 and earlier does not safely handle symbolic links during the extraction of .tar and .tar.gz archives, allowing crafted archives to write… Affected: All versions, or not specified |
| CVE-2026-57281 | 7.5 | Jun 24 | Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not reject Groovy AST transformation annotations carrying an extensions member, allowing attackers able to run… Affected: All versions, or not specified |
| CVE-2026-3505 | 7.5 | Apr 15 | Unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion. Affected: All versions, or not specified |
| CVE-2026-5588 | 7.5 | Apr 15 | PKIX draft CompositeVerifier accepts empty signature sequence as valid. Affected: All versions, or not specified |
| CVE-2025-14813 | 7.5 | Apr 15 | GOSTCTR implementation unable to process more than 255 blocks correctly Affected: All versions, or not specified |
| CVE-2026-1605 | 7.5 | Mar 5 | In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed HTTP request, with Content-Encoding: gzip, is processed… Affected: All versions, or not specified |
| CVE-2026-40542 | 7.3 | Apr 22 | Apache HttpClient: SCRAM-SHA-256 mutual authentication bypass may cause the client to accept authentication without proper mutual authentication verification Affected: All versions, or not specified |
Showing 9