Red Hat Developer Hub 1.8 vulnerabilities | LiveThreat CVE Feed

Product

Red Hat Developer Hub 1.8

by Red Hat · last CVE May 7, 2026

CVEs

On KEV

10.0

Max CVSS

New 30D

Severity mix

Critical 13High 23Medium 5Low 1

Severity

Exploitation

Watch

Add Red Hat Developer Hub 1.8 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-42041	6.5	1%	Apr 24	Axios: Authentication Bypass via Prototype Pollution Gadget in `validateStatus` Merge Strategy Affected: All versions, or not specified
CVE-2026-3118	6.5	1%	Feb 25	Rhdh: graphql injection leading to platform-wide denial of service (dos) in rh developer hub orchestrator plugin Affected: All versions, or not specified
CVE-2026-24049	5.5	0%	Jan 22	wheel Allows Arbitrary File Permission Modification via Path Traversal Affected: All versions, or not specified
CVE-2025-13465	5.3	2%	Jan 21	Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions Affected: All versions, or not specified
CVE-2026-40175	4.8	2%	Apr 10	Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain Affected: All versions, or not specified