Login Request a demo
SA
Product
Self-service automation portal 2
by Red Hat · last CVE Oct 8, 2026
52
CVEs
0
On KEV
10.0
Max CVSS
1
New 30D
Vulnerabilities52In the news0Timeline
Severity mix
Critical 11High 38Medium 3Low 0
Severity
All severities52Critical11High38Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Self-service automation portal 2 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-26332
10.0
1%
May 4
vm2: Sandbox Escape
Affected: All versions, or not specified
CVE-2026-42043
10.0
1%
Apr 24
Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Axios 1.15.0
Affected: All versions, or not specified
CVE-2025-62718
9.9
1%
Apr 9
Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF
Affected: All versions, or not specified
CVE-2026-24118
9.8
1%
May 4
VM2 Sandbox Breakout Through __lookupGetter__
Affected: All versions, or not specified
CVE-2026-41242
9.8
1%
Apr 18
protobufjs has an arbitrary code execution issue
Affected: All versions, or not specified
CVE-2026-29186
9.8
1%
Mar 7
@backstage/plugin-techdocs-node: TechDocs Mkdocs Configuration Key Enables Arbitrary Code Execution
Affected: All versions, or not specified
CVE-2026-27606
9.8
2%
Feb 25
Rollup 4 has Arbitrary File Write via Path Traversal
Affected: All versions, or not specified
CVE-2026-1615
9.8
1%
Feb 9
Versions of the package jsonpath before 1.3.0 are vulnerable to Arbitrary Code Injection via unsafe evaluation of user-supplied JSON Path expressions
Affected: All versions, or not specified
CVE-2026-25896
9.3
1%
Feb 20
fast-xml-parser has an entity encoding bypass via regex injection in DOCTYPE entity names
Affected: All versions, or not specified
CVE-2026-42264
9.1
1%
May 8
Axios: Prototype pollution read-side gadgets in HTTP adapter allow credential injection and request hijacking
Affected: All versions, or not specified
CVE-2026-42044
9.1
1%
Apr 24
Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver`
Affected: All versions, or not specified
Showing 11