What’s Vulnerable › Products

RedHat Developer Hub vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your RedHat Developer Hub version is affected

Latest RedHat Developer Hub vulnerabilities

• CVE-2026-44495 — Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge (CVSS 7.7)
• CVE-2026-29063 — Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable (CVSS 9.8)
• CVE-2026-3118 — Rhdh: graphql injection leading to platform-wide denial of service (dos) in rh developer hub orchestrator plugin (CVSS 6.5)
• CVE-2025-14874 — Nodemailer: nodemailer: denial of service via crafted email address header (CVSS 7.5)