RH
Product
Red Hat Advanced Cluster Security 4.8
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 11Medium 5Low 0
Watch
Add Red Hat Advanced Cluster Security 4.8 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-25755 | 8.8 | Feb 19 | jsPDF has PDF Object Injection via Unsanitized Input in addJS Method Affected: All versions, or not specified |
| CVE-2026-25940 | 8.1 | Feb 19 | jsPDF's PDF Injection in AcroForm module allows Arbitrary JavaScript Execution (RadioButton.createOption and "AS" property) Affected: All versions, or not specified |
| CVE-2026-24737 | 8.1 | Feb 2 | jsPDF has a PDF Injection in AcroFormChoiceField which allows Arbitrary JavaScript Execution Affected: All versions, or not specified |
| CVE-2026-34986 | 7.5 | Apr 6 | Go JOSE affect by a panic in JWE decryption Affected: All versions, or not specified |
| CVE-2026-32286 | 7.5 | Mar 26 | Denial of service in github.com/jackc/pgproto3/v2 Affected: All versions, or not specified |
| CVE-2026-25679 | 7.5 | Mar 6 | Incorrect parsing of IPv6 host literals in net/url Affected: All versions, or not specified |
| CVE-2026-29074 | 7.5 | Mar 6 | SVGO: DoS through entity expansion in DOCTYPE (Billion Laughs) Affected: All versions, or not specified |
| CVE-2026-26278 | 7.5 | Feb 19 | fast-xml-parser affected by DoS through entity expansion in DOCTYPE (no expansion limit) Affected: All versions, or not specified |
| CVE-2026-25535 | 7.5 | Feb 19 | jsPDF Affected by Client-Side/Server-Side Denial of Service via Malicious GIF Dimensions Affected: All versions, or not specified |
| CVE-2026-21441 | 7.5 | Jan 7 | urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) Affected: All versions, or not specified |
| CVE-2025-68428 | 7.5 | Jan 5 | jsPDF has Local File Inclusion/Path Traversal vulnerability Affected: All versions, or not specified |
Showing 11
