CVE Tools
Track your stack

Red Hat Openshift Dev Spaces

45 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Red Hat Openshift Dev Spaces, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Red Hat Openshift Dev Spaces CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Red Hat Openshift Dev Spaces CVEs per month
MonthCVEs
2024-121
2025-012
2025-021
2025-030
2025-040
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-121
2026-013
2026-021
2026-030
2026-041
2026-050
2026-060
2026-070
2026-082
2026-096
2026-102
2026-114

Severity

How the 45 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical37%
  • High2249%
  • Medium1840%
  • Low24%

Latest CVEs

The 15 most recently published vulnerabilities affecting Red Hat Openshift Dev Spaces.

  1. CVE-2026-91151Cockpit: cockpit: local privilege escalation via insecure symlink handling in public key addition helper7.3
  2. CVE-2026-91150Cockpit: cockpit: denial of service via unbounded fragmented websocket messages7.5
  3. CVE-2026-50240Pipelines-as-code: openshift-pipelines-operator-rh: pipelines-as-code: repository users can trigger namespace edit-equivalent execution via auto-provisioned pipeline serviceaccount8.8
  4. CVE-2026-107912Io.quarkus/quarkus-vertx-http: quarkus-vertx-http: authorization bypass in management interface via path concatenation flaw7.7
  5. CVE-2026-114236Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers3.3
  6. CVE-2026-107935Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose9.3
  7. CVE-2026-91142Cockpit: cockpit: unauthorized modification of login records via integer overflow3.6
  8. CVE-2026-91147Cockpit: cockpit: denial of service in `cockpit-ws` due to url-root handling without a trailing slash5.9
  9. CVE-2026-91149Cockpit: cockpit: denial of service via unbounded connection thread spawning7.5
  10. CVE-2025-11395Podman: arbitrary file write when importing oci archive5.5
  11. CVE-2026-79699Podman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directory4.4
  12. CVE-2026-79705Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers4.5
  13. CVE-2026-76235Cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via cockpitlang cookie in send_login_html7.5
  14. CVE-2026-19730Podman: podman: quadlet install --replace non-truncating write retains removed host-access directives4.2
  15. CVE-2026-33810Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x5098.2

Product grouping is registry-driven, with AI assist and human review. How it works