RHSA-2026%3A21772

RHSA-2026%3A21772 PUBLISHED CVSS 7.5 HIGH

A flaw was found in org.eclipse.jetty. A remote attacker can exploit this vulnerability by sending a compressed HTTP request with Content-Encoding: gzip when the server's response is not compressed. This prevents the release of the JDK Inflater, leading to a resource leak. This resource exhaustion can result in a Denial of Service (DoS), making the server unavailable to legitimate users.

Risk Scores

CVSS 3.1

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Products

Vendor	Product	Versions
Red Hat	registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:1c79ec491dbdcb2dcd861df09d8cadb3b6db3743b614b65301020f4a2f6d39dd_arm64 as a component of Red Hat OpenShift Dev Spaces 3.28	, , *
Red Hat	registry.redhat.io/devspaces/udi-base-rhel10@sha256:b03208e52022e91dd863090b47da35bea4ea1c4c835d30bbf49e2d7e589895b8_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.28	, , *
Red Hat	registry.redhat.io/devspaces/code-rhel9@sha256:b86a03ffcc1fc359116cc0ca231c64e5d612f047d41b5a2d44d1f3a9d880c14b_amd64 as a component of Red Hat OpenShift Dev Spaces 3.28	, , *
Red Hat	registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:0abb9413b448c31440bf42cdd876174b1534043011a68842c95d18baca978b65_s390x as a component of Red Hat OpenShift Dev Spaces 3.28	, , *
Red Hat	registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:49e24bc1bd333713715af7930958a6b01a595ff6320742c7c485f441e6385eb2_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.28	, , *
Red Hat	registry.redhat.io/devspaces/udi-base-rhel9@sha256:ba654706ac34dcedfd1ca31f3e77190d598e5d54d19c1b8d7eae8f67a924eef7_s390x as a component of Red Hat OpenShift Dev Spaces 3.28	, , *
Red Hat	registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:32489db0d434bcd83578d77acb7c3e8cbbcb7458ffe47bc003423df9b2437133_arm64 as a component of Red Hat OpenShift Dev Spaces 3.28	, , *
Red Hat	registry.redhat.io/devspaces/dashboard-rhel9@sha256:0f5532354d096fca2b4b51e1184c5d219d9c51880873482437ddf64c197ceb1f_s390x as a component of Red Hat OpenShift Dev Spaces 3.28	, , *
Red Hat	registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:2babef463b6f97f7befd13ea628baae2d4d893cc9f81158ff91d82cca428d801_s390x as a component of Red Hat OpenShift Dev Spaces 3.28	, , *
Red Hat	registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:586e3c00134033b5371c6eb5c839c65c89e7833918122db6ad6de7b286caf2da_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.28	, , *
Red Hat	registry.redhat.io/devspaces/server-rhel9@sha256:0e2ef986cf3ec33b9df0ef362570fd536b2805da20d0e99b6fb25b053235d117_amd64 as a component of Red Hat OpenShift Dev Spaces 3.28	, , *
Red Hat	registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:82fe544aa4f03ca665ad23acbb5472032ccdb04fc9e96d77b3b8e764e544f846_arm64 as a component of Red Hat OpenShift Dev Spaces 3.28	, , *
Red Hat	registry.redhat.io/devspaces/traefik-rhel9@sha256:992ea99b0f70663a8409fce0e498044cee5d09e379f45986602c3c9a10a664ba_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.28	, , *
Red Hat	Red Hat OpenShift Dev Spaces
Red Hat	registry.redhat.io/devspaces/udi-base-rhel10@sha256:9fef848f79f7157c9eb8433f7ffe25d7c6077bcfbb33aa7f6f773c5b39ae0f80_s390x as a component of Red Hat OpenShift Dev Spaces 3.28	, , *
Red Hat	registry.redhat.io/devspaces/server-rhel9@sha256:0ba5969eb9013d9d44e20c12fe0a510cf38ca6948ce1d61e087f4cb527044d72_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.28	, , *
Red Hat	registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:d0250c5ec7cd6f6a1584680bb23a9b86c7791a8b8176561b9d093301d41a6218_s390x as a component of Red Hat OpenShift Dev Spaces 3.28	, , *
Red Hat	registry.redhat.io/devspaces/openvsx-rhel9@sha256:fe8c450b4f48bd6935495464a3c2a7bfcf29e2bee04d44f9e60344351c49b049_s390x as a component of Red Hat OpenShift Dev Spaces 3.28	, , *
Red Hat	registry.redhat.io/devspaces/traefik-rhel9@sha256:36af8b9a1a82fb3f1db23701ba3c1d28c0e8d517e0b2c5f15802c30ed38335ff_s390x as a component of Red Hat OpenShift Dev Spaces 3.28	, , *
Red Hat	registry.redhat.io/devspaces/dashboard-rhel9@sha256:e10099e6dec84dd608b95679315fd09d6a8c377f57dabf68f5b3e1fdb12a10e5_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.28	, , *

…and 42 more

Timeline

May 28, 2026 CVE Published
May 29, 2026 Distribution Patch
May 29, 2026 Distribution Patch
May 29, 2026 Security Advisory
May 29, 2026 Security Advisory
May 29, 2026 Security Advisory
May 29, 2026 Security Advisory
May 29, 2026 Security Advisory
May 29, 2026 Security Advisory
May 29, 2026 Security Advisory
May 29, 2026 Security Advisory
May 29, 2026 Security Advisory

References

https://access.redhat.com/errata/RHSA-2026:21772 advisory
https://access.redhat.com/documentation/en-us/red_hat_openshift_dev_spaces/3.28/html/administration_guide/installing-devspaces advisory
https://access.redhat.com/security/cve/CVE-2025-14813 advisory
https://access.redhat.com/security/cve/CVE-2025-68121 advisory
https://access.redhat.com/security/cve/CVE-2026-0636 advisory
https://access.redhat.com/security/cve/CVE-2026-1525 advisory
https://access.redhat.com/security/cve/CVE-2026-1526 advisory
https://access.redhat.com/security/cve/CVE-2026-1528 advisory
https://access.redhat.com/security/cve/CVE-2026-1605 advisory
https://access.redhat.com/security/cve/CVE-2026-2229 advisory
https://access.redhat.com/security/cve/CVE-2026-2327 advisory
https://access.redhat.com/security/cve/CVE-2026-26996 advisory
https://access.redhat.com/security/cve/CVE-2026-27904 advisory
https://access.redhat.com/security/cve/CVE-2026-29074 advisory
https://access.redhat.com/security/cve/CVE-2026-30827 advisory
https://access.redhat.com/security/cve/CVE-2026-31802 advisory
https://access.redhat.com/security/cve/CVE-2026-32141 advisory
https://access.redhat.com/security/cve/CVE-2026-32280 advisory
https://access.redhat.com/security/cve/CVE-2026-32282 advisory
https://access.redhat.com/security/cve/CVE-2026-32305 advisory

…and 219 more

Open in Interactive Console →