Login Request a demo
OS
Product
OpenShift Service Mesh 2
by Red Hat · last CVE May 8, 2026
6
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 2High 2Medium 2Low 0
Severity
All severities6Critical2High2Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add OpenShift Service Mesh 2 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-62718
9.9
1%
Apr 9
Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF
Affected: All versions, or not specified
CVE-2026-42264
9.1
1%
May 8
Axios: Prototype pollution read-side gadgets in HTTP adapter allow credential injection and request hijacking
Affected: All versions, or not specified
CVE-2026-27140
8.8
1%
Apr 8
Code execution vulnerability in SWIG code generation in cmd/go
Affected: All versions, or not specified
CVE-2025-0752
7.1
0%
Jan 28
Envoyproxy: openshift service mesh envoy http header sanitization bypass leading to dos and unauthorized access
Affected: All versions, or not specified
CVE-2024-11831
5.4
1%
Feb 10
Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript
Affected: All versions, or not specified
CVE-2025-0754
4.3
0%
Jan 28
Envoyproxy: openshift service mesh 2.6.3 and 2.5.6 envoy header handling allows log injection and potential spoofing
Affected: All versions, or not specified
Showing 6