Skip to content
OpenAdvisories
Medium WID-SEC-2026-0592 2 CVEs

Red Hat Developer Hub: Mehrere Schwachstellen

Published Mar 4, 2026 · Updated May 11, 2026 · Revision 2 · de-DE

Vendor: Red Hat Product: Enterprise Linux Platform: Linux

Summary

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Red Hat Developer Hub ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen oder um vertrauliche Informationen offenzulegen.

Product

Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.

Vulnerabilities 2

  • High 7.5
    CVE-2025-13033

    Nodemailer: nodemailer: email to an unintended domain can occur due to interpretation conflict

    A vulnerability was identified in the email parsing library due to improper handling of specially formatted recipient email addresses. An attacker can exploit this flaw by crafting a recipient address that embeds an external address within quotes. This causes…

    Red Hat nodemailer Red Hat Advanced Cluster Management for Kubernetes 2 nodemailer Debian Ubuntu Wolfi npm
  • Medium 4.9
    CVE-2024-53382

    PrismJS DOM Clobbering vulnerability

    Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements.

    prismjs prism node-prismjs prismjs Debian Ubuntu npm

Revision history

  1. #2

    Neue Updates von Red Hat aufgenommen

  2. #1

    Initiale Fassung

References