Red Hat Developer Hub
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:developer_hub:-:*:*:*:*:*:*:*part: a version: - update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Developer Hub (ec33e79d-0a22-53da-aa79-cf3cd7bdaa06) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-3118 |
vulnerable | 2026-06-08 08:01:17.883130 |
Rhdh: graphql injection leading to platform-wide denial of service (dos) in rh developer hub orchestrator plugin
MEDIUM (6.5)
A security flaw was identified in the Orchestrator Plugin of Red Hat Developer Hub (Backstage). The issue occurs due to insufficient input validation in GraphQL query handling. An authenticated user can inject specially crafted input into API requests, which disrupts backend query processing. This results in the entire Backstage application crashing and restarting, leading to a platform-wide Denial of Service (DoS). As a result, legitimate users temporarily lose access to the platform.
Published: 2026-02-25T11:25:55.016Z
Updated: 2026-05-05T20:37:00.910Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14874 |
vulnerable | 2026-06-08 07:06:35.289359 |
Nodemailer: nodemailer: denial of service via crafted email address header
HIGH (7.5)
A flaw was found in Nodemailer. This vulnerability allows a denial of service (DoS) via a crafted email address header that triggers infinite recursion in the address parser.
Published: 2025-12-18T08:40:31.916Z
Updated: 2026-10-27T04:36:27.387Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.