Known vulnerabilities in Red Hat Self-service automation portal 2
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-45411 | vm2 is an open source vm/sandbox for Node.js | 9.8 Critical | May 13, 2026 |
| CVE-2026-44009 | vm2: Sandbox Breakout Through Null Proto Exception | 9.8 Critical | May 13, 2026 |
| CVE-2026-44008 | vm2 has sandbox breakout via `neutralizeArraySpeciesBatch` | 9.8 Critical | May 13, 2026 |
| CVE-2026-44007 | vm2: nesting: true bypasses require: false, allowing sandbox escape to arbitrary OS command execution | 9.1 Critical | May 13, 2026 |
| CVE-2026-44006 | vm2 is an open source vm/sandbox for Node.js | 10.0 Critical | May 13, 2026 |
| CVE-2026-44004 | vm2 is an open source vm/sandbox for Node.js | 7.5 High | May 13, 2026 |
| CVE-2026-44001 | vm2 is an open source vm/sandbox for Node.js | 8.6 High | May 13, 2026 |
| CVE-2026-43999 | vm2 is an open source vm/sandbox for Node.js | 9.9 Critical | May 13, 2026 |
| CVE-2026-43998 | vm2 is an open source vm/sandbox for Node.js | 8.5 High | May 13, 2026 |
| CVE-2026-43997 | vm2 is an open source vm/sandbox for Node.js | 10.0 Critical | May 13, 2026 |
| CVE-2026-44293 | protobufjs compiles protobuf definitions into JavaScript (JS) functions | 7.7 High | May 13, 2026 |
| CVE-2026-44289 | protobufjs compiles protobuf definitions into JavaScript (JS) functions | 7.5 High | May 13, 2026 |
| CVE-2026-42338 | ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript | 5.3 Medium | May 12, 2026 |
| CVE-2026-42264 | Axios is a promise based HTTP client for the browser and Node.js | 7.4 High | May 8, 2026 |
| CVE-2026-41139 | Math.js is an extensive math library for JavaScript and Node.js | 8.8 High | May 7, 2026 |
| CVE-2026-41675 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module | 8.7 High | May 7, 2026 |
| CVE-2026-41674 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module | 8.7 High | May 7, 2026 |
| CVE-2026-41673 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module | 8.7 High | May 7, 2026 |
| CVE-2026-41672 | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module | 8.7 High | May 7, 2026 |
| CVE-2026-6322 | fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them… | 7.5 High | May 5, 2026 |
| CVE-2026-26956 | vm2 is an open source vm/sandbox for Node.js | 9.8 Critical | May 4, 2026 |
| CVE-2026-26332 | vm2 is an open source vm/sandbox for Node.js | 9.8 Critical | May 4, 2026 |
| CVE-2026-24120 | vm2 is an open source vm/sandbox for Node.js | 9.8 Critical | May 4, 2026 |
| CVE-2026-24118 | vm2 is an open source vm/sandbox for Node.js | 9.8 Critical | May 4, 2026 |
| CVE-2026-42039 | Axios is a promise based HTTP client for the browser and Node.js | 6.9 Medium | Apr 24, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1867
Red Hat Enterprise Linux 8 1841
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1457
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 631
Red Hat Enterprise Linux 9.6 Extended Update Support 505
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 478
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 462
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433