What’s Vulnerable › Products

Red Hat Advanced Cluster Security for Kubernetes vulnerabilities

7 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Red Hat Advanced Cluster Security for Kubernetes version is affected

Exploited Red Hat Advanced Cluster Security for Kubernetes vulnerabilities

• CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability

Latest Red Hat Advanced Cluster Security for Kubernetes vulnerabilities

• CVE-2026-44495 — Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge (CVSS 7.7)
• CVE-2026-29063 — Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable (CVSS 9.8)
• CVE-2025-5198 — Stackrox: xss in stackrox (CVSS 5.4)
• CVE-2024-0406 — Mholt/archiver: path traversal vulnerability (CVSS 7.8)
• CVE-2023-48795 — Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin (CVSS 5.9)
• CVE-2023-4958 — Stackrox: missing http security headers allows for clickjacking in web ui (CVSS 6.1)
• CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability (CVSS 7.5) — exploited
• CVE-2022-1902 — (CVSS 8.8)