Red Hat Security Advisory

RHSA-2026:2675

Red Hat Developer Hub 1.8.3 release.

Released 2026-02-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Developer Hub 1.8 registry.redhat.io/rhdh/rhdh-hub-rhel9, registry.redhat.io/rhdh/rhdh-rhel9-operator

TI-2026-19377 CVE-2026-24049 · GHSA-8rrh-rw8j-w5fx

MEDIUM 64

wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.0035 Published 2026-01-22 Partial fix · 0.46.2 CWE-22

TI-2025-12309 CVE-2025-13465 · GHSA-xxjr-mmjv-4gpg

MEDIUM 40

The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.01823 Published 2026-01-21 Partial fix · 4.17.23, 4.18.0 CWE-1321

TI-2025-38131 CVE-2025-61729 · GHSA-7c64-f9jr-v9h2

LOW 33

Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0049 Published 2025-12-02 Partial fix · 1.24.11, 1.25.5 CWE-295