developer_hub_1_3_for_rhel vulnerabilities
CVEs whose affected-version data names the developer_hub_1_3_for_rhel package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2024-35255Medium· 5.5azure-identity: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/Azure/azure-sdk-for-go/sdk/azidentity (CVE-2024…
A flaw was found in Microsoft's Azure Identity Libraries and the Microsoft Authentication Library (MSAL). The flaw arises from a race condition—a scenario where the timing of events leads to unexpected behavior—during concurrent operations…
▾ SunlitRed Hat · cert-manager operator for Red Hat OpenShift 1.15EPSS 0.83%via CSAF
CVE-2024-37891Medium· 4.4urllib3: proxy-authorization request header is not stripped during cross-origin redirects (CVE-2024-37891)
A flaw was found in urllib3, an HTTP client library for Python. In certain configurations, urllib3 does not treat the `Proxy-Authorization` HTTP header as one carrying authentication material. This issue results in not stripping the header…
▾ SunlitRed Hat · Red Hat Enterprise Linux AppStream (v. 8)EPSS 1.1%via CSAF