Developer Hub

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:developer_hub:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductDeveloper Hub (ec33e79d-0a22-53da-aa79-cf3cd7bdaa06)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-3118 vulnerable 2026-06-08 08:01:17.883130 Rhdh: graphql injection leading to platform-wide denial of service (dos) in rh developer hub orchestrator plugin
MEDIUM (6.5)
A security flaw was identified in the Orchestrator Plugin of Red Hat Developer Hub (Backstage). The issue occurs due to insufficient input validation in GraphQL query handling. An authenticated user can inject specially crafted input into API requests, which disrupts backend query processing. This results in the entire Backstage application crashing and restarting, leading to a platform-wide Denial of Service (DoS). As a result, legitimate users temporarily lose access to the platform.
Published: 2026-02-25T11:25:55.016Z
Updated: 2026-05-05T20:37:00.910Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14874 vulnerable 2026-06-08 07:06:35.289359 Nodemailer: nodemailer: denial of service via crafted email address header
HIGH (7.5)
A flaw was found in Nodemailer. This vulnerability allows a denial of service (DoS) via a crafted email address header that triggers infinite recursion in the address parser.
Published: 2025-12-18T08:40:31.916Z
Updated: 2026-01-08T02:59:52.145Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.