Known vulnerabilities in Red Hat Trusted Profile Analyzer

Is your version affected?

CVE	Summary	Score	Published
CVE-2026-3304	Multer is a node.js middleware for handling `multipart/form-data`	8.7 High	Feb 27, 2026
CVE-2026-2359	Multer is a node.js middleware for handling `multipart/form-data`	8.7 High	Feb 27, 2026
CVE-2026-25639	Axios is a promise based HTTP client for the browser and Node.js	7.5 High	Feb 9, 2026
CVE-2025-13465	The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution	6.9 Medium	Jan 21, 2026
CVE-2025-61686	React Router is a router for React	9.1 Critical	Jan 10, 2026
CVE-2025-8556	Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results	3.7 Low	Aug 6, 2025
CVE-2025-5791	Users: `root` appended to group listings	7.1 High	Jun 6, 2025
CVE-2025-4574	Crossbeam-channel: crossbeam-channel vulnerable to double free on drop	6.5 Medium	May 13, 2025
CVE-2025-4432	Ring: some aes functions may panic when overflow checking is enabled in ring	5.3 Medium	May 9, 2025
CVE-2025-3416	Rust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch`	3.7 Low	Apr 8, 2025
CVE-2024-11831	Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript	5.4 Medium	Feb 10, 2025
CVE-2024-3508	A flaw was found in Bombastic, which allows authenticated users to upload compressed (bzip2 or zstd) SBOMs	4.3 Medium	Apr 25, 2024