Known vulnerabilities in Red Hat Fuse 7

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-44488	Axios is a promise based HTTP client for the browser and Node.js	7.5 High	Jun 11, 2026
CVE-2026-44496	Axios is a promise based HTTP client for the browser and Node.js	7.5 High	Jun 11, 2026
CVE-2026-44495	Axios is a promise based HTTP client for the browser and Node.js	7.0 High	Jun 11, 2026
CVE-2026-44494	Axios is a promise based HTTP client for the browser and Node.js	8.7 High	Jun 11, 2026
CVE-2026-44492	Axios is a promise based HTTP client for the browser and Node.js	8.6 High	Jun 11, 2026
CVE-2026-41731	JsonKafkaHeaderMapper and the deprecated DefaultKafkaHeaderMapper matched type headers against trusted packages using…	8.1 High	Jun 9, 2026
CVE-2025-71319	image-size 2.0.2 Denial of Service via Infinite Loop in JXL/HEIF Parser	8.7 High	Jun 9, 2026
CVE-2026-40984	In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service…	7.5 High	Jun 9, 2026
CVE-2026-40983	In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service…	7.5 High	Jun 9, 2026
CVE-2026-9277	shell-quote's `quote()` function did not validate object-token inputs against the operator model used by `parse()`	8.1 High	May 22, 2026
CVE-2026-44417	The fix for CVE-2025-48913: Apache CXF: Untrusted JMS configuration can lead to RCE was not complete, meaning that…	Not rated	May 22, 2026
CVE-2026-44930	An LDAP injection vulnerability in the LDAP Certificate repository of the XKMS server in Apache CXF may allow an…	Not rated	May 22, 2026
CVE-2026-47323	Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative…	Not rated	May 19, 2026
CVE-2026-45736	ws is an open source WebSocket client and server for Node.js	4.4 Medium	May 15, 2026
CVE-2026-44248	Netty is an asynchronous, event-driven network application framework	5.3 Medium	May 13, 2026
CVE-2026-42587	Netty is an asynchronous, event-driven network application framework	7.5 High	May 13, 2026
CVE-2026-42584	Netty is an asynchronous, event-driven network application framework	7.3 High	May 13, 2026
CVE-2026-42579	Netty is an asynchronous, event-driven network application framework	7.5 High	May 13, 2026
CVE-2026-42578	Netty is an asynchronous, event-driven network application framework	2.9 Low	May 13, 2026
CVE-2026-42581	Netty is an asynchronous, event-driven network application framework	5.8 Medium	May 13, 2026
CVE-2026-42264	Axios is a promise based HTTP client for the browser and Node.js	7.4 High	May 8, 2026
CVE-2026-41675	xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module	8.7 High	May 7, 2026
CVE-2026-41674	xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module	8.7 High	May 7, 2026
CVE-2026-41673	xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module	8.7 High	May 7, 2026
CVE-2026-41672	xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module	8.7 High	May 7, 2026

Other Red Hat products