CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Free accounts get a daily email of the CVEs that match up to 3 of their products on My program; subscribers get each one the moment it is published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 3,234 CVEs published, 239 critical, and 5 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
3,234
Show in the list
Critical, last 7 days
239
Show in the list
Healthcare-tagged, last 7 days
6
Show in the list
Known exploited (CISA KEV)
1,762
Show in the list

Showing CVEs that name the product redhat:offline_knowledge_portal. Show all products

Free: a daily email for up to 3 products and the weekly digest. No card, no password. By continuing you agree to the Terms and Privacy Policy.

12 CVEs
Showing 1 to 10.
CVESeverityTitlePublished
CVE-2026-21441High 8.9urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)
Assigned by GitHub_M
Jan 7, 2026
CVE-2026-1605High 7.5In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed HTTP request, with Content-Encoding: gzip, is processed and the corresponding…
Assigned by eclipse
Mar 5, 2026
CVE-2026-24281Medium 5.9Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager
Assigned by apache
Mar 7, 2026
CVE-2026-24308Medium 6.5Apache ZooKeeper: Sensitive information disclosure in client configuration handling
Assigned by apache
Mar 7, 2026
CVE-2026-5795High 7.4In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable.
Assigned by eclipse
Apr 8, 2026
CVE-2026-2332High 7.4HTTP Request Smuggling via Chunked Extension Quoted-String Parsing
Assigned by eclipse
Apr 14, 2026
CVE-2026-40542High 7.3Apache HttpClient: SCRAM-SHA-256 mutual authentication bypass may cause the client to accept authentication without proper mutual authentication verification
Assigned by apache
Apr 22, 2026
CVE-2026-45292Medium 5.3opentelemetry-java: Unbounded Memory Allocation in W3C Baggage Propagation
Assigned by GitHub_M
May 28, 2026
CVE-2026-44249High 8.1Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking
Assigned by GitHub_M
Jun 11, 2026
CVE-2026-45416High 7.5Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes
Assigned by GitHub_M
Jun 12, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Essential cookies only, unless you allow a Google ads cookie. See our .