← Back

Developer Hub

developer_hub

Vendor: Redhat • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-3118
1Redhat
1Developer Hub
Jun 17, 2026
Feb 25, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
A security flaw was identified in the Orchestrator Plugin of Red Hat Developer Hub (Backstage). The issue occurs due to insufficient input validation in GraphQL query handling. An authenticated user can inject specially...Show more
A security flaw was identified in the Orchestrator Plugin of Red Hat Developer Hub (Backstage). The issue occurs due to insufficient input validation in GraphQL query handling. An authenticated user can inject specially crafted input into API requests, which disrupts backend query processing. This results in the entire Backstage application crashing and restarting, leading to a platform-wide Denial of Service (DoS). As a result, legitimate users temporarily lose access to the platform.Show less
CVE-2025-14874
2Nodemailer
Redhat
4Advanced Cluster Management For Kubernetes
Ceph StorageDeveloper Hub+1 more
Jun 17, 2026
Dec 18, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
A flaw was found in Nodemailer. This vulnerability allows a denial of service (DoS) via a crafted email address header that triggers infinite recursion in the address parser.