VDB
RHSA-2026%3A3710
RHSA-2026%3A3710
PUBLISHED
CVSS 5.900000095367432 MEDIUM
A flaw was found in the Node.js WebSocket library (ws). A request with several headers exceeding the 'server.maxHeadersCount' threshold could be used to crash a ws server, leading to a denial of service.
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel8@sha256:0dee713a14ab49d93b52b280d4ca3c6fc1c5f604087c81b755a6715330c91ea7_amd64 as a component of Red Hat OpenShift Pipelines 1.15 | registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel8@sha256:0dee713a14ab49d93b52b280d4ca3c6fc1c5f604087c81b755a6715330c91ea7_amd64, registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel8@sha256:0dee713a14ab49d93b52b280d4ca3c6fc1c5f604087c81b755a6715330c91ea7_amd64, * |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-watcher-rhel8@sha256:8ce8fce1d1e1acd9fb44dc4d5797e57fe8e349624f6c7b1351757d7d6143b679_amd64 as a component of Red Hat OpenShift Pipelines 1.15 | *, *, * |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-results-watcher-rhel8@sha256:8969e863a2ac74d0ab37812bd0aa5d86f261b97d0c2fecd0f35d2343c2f5bd67_ppc64le as a component of Red Hat OpenShift Pipelines 1.15 | *, registry.redhat.io/openshift-pipelines/pipelines-results-watcher-rhel8@sha256:8969e863a2ac74d0ab37812bd0aa5d86f261b97d0c2fecd0f35d2343c2f5bd67_ppc64le, registry.redhat.io/openshift-pipelines/pipelines-results-watcher-rhel8@sha256:8969e863a2ac74d0ab37812bd0aa5d86f261b97d0c2fecd0f35d2343c2f5bd67_ppc64le |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel8@sha256:50133b51c695735e5f1fdb54d5423331091c1d113b0747d9565a42839d7510bc_s390x as a component of Red Hat OpenShift Pipelines 1.15 | registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel8@sha256:50133b51c695735e5f1fdb54d5423331091c1d113b0747d9565a42839d7510bc_s390x, registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel8@sha256:50133b51c695735e5f1fdb54d5423331091c1d113b0747d9565a42839d7510bc_s390x, registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel8@sha256:50133b51c695735e5f1fdb54d5423331091c1d113b0747d9565a42839d7510bc_s390x |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-workingdirinit-rhel8@sha256:578c9afda064065cc2f4e18b59dbb92cf78015654573de80a72bc4e56fc0d1f3_ppc64le as a component of Red Hat OpenShift Pipelines 1.15 | *, *, registry.redhat.io/openshift-pipelines/pipelines-workingdirinit-rhel8@sha256:578c9afda064065cc2f4e18b59dbb92cf78015654573de80a72bc4e56fc0d1f3_ppc64le |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-workingdirinit-rhel8@sha256:fbbf6924f67a455359ccd4e884e1608fb20475850e874874d158f5f2e01425c8_amd64 as a component of Red Hat OpenShift Pipelines 1.15 | registry.redhat.io/openshift-pipelines/pipelines-workingdirinit-rhel8@sha256:fbbf6924f67a455359ccd4e884e1608fb20475850e874874d158f5f2e01425c8_amd64, *, * |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel8@sha256:50133b51c695735e5f1fdb54d5423331091c1d113b0747d9565a42839d7510bc_s390x as a component of Red Hat OpenShift Pipelines 1.15 | *, registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel8@sha256:50133b51c695735e5f1fdb54d5423331091c1d113b0747d9565a42839d7510bc_s390x, registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel8@sha256:50133b51c695735e5f1fdb54d5423331091c1d113b0747d9565a42839d7510bc_s390x |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-hub-db-migration-rhel8@sha256:fdd2f4bffececf03b6566cf573fdf6224495d79a75ad1031219fad9902d7a3f1_ppc64le as a component of Red Hat OpenShift Pipelines 1.15 | registry.redhat.io/openshift-pipelines/pipelines-hub-db-migration-rhel8@sha256:fdd2f4bffececf03b6566cf573fdf6224495d79a75ad1031219fad9902d7a3f1_ppc64le, registry.redhat.io/openshift-pipelines/pipelines-hub-db-migration-rhel8@sha256:fdd2f4bffececf03b6566cf573fdf6224495d79a75ad1031219fad9902d7a3f1_ppc64le, registry.redhat.io/openshift-pipelines/pipelines-hub-db-migration-rhel8@sha256:fdd2f4bffececf03b6566cf573fdf6224495d79a75ad1031219fad9902d7a3f1_ppc64le |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-events-rhel8@sha256:0e59fd179abc02c54784b3293bc3d21087bd0ec135c691c5523879149da33a5a_arm64 as a component of Red Hat OpenShift Pipelines 1.15 | registry.redhat.io/openshift-pipelines/pipelines-events-rhel8@sha256:0e59fd179abc02c54784b3293bc3d21087bd0ec135c691c5523879149da33a5a_arm64, registry.redhat.io/openshift-pipelines/pipelines-events-rhel8@sha256:0e59fd179abc02c54784b3293bc3d21087bd0ec135c691c5523879149da33a5a_arm64, registry.redhat.io/openshift-pipelines/pipelines-events-rhel8@sha256:0e59fd179abc02c54784b3293bc3d21087bd0ec135c691c5523879149da33a5a_arm64 |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-nop-rhel8@sha256:72978ab3728ae29e51b68affb9e0b9a501bc69653c392783cb9ea121c8971661_s390x as a component of Red Hat OpenShift Pipelines 1.15 | registry.redhat.io/openshift-pipelines/pipelines-nop-rhel8@sha256:72978ab3728ae29e51b68affb9e0b9a501bc69653c392783cb9ea121c8971661_s390x, *, registry.redhat.io/openshift-pipelines/pipelines-nop-rhel8@sha256:72978ab3728ae29e51b68affb9e0b9a501bc69653c392783cb9ea121c8971661_s390x |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-triggers-webhook-rhel8@sha256:5f68ba66d17d612702cc47916df916b751c3b8d71faa094f1a174cb4338c3d68_ppc64le as a component of Red Hat OpenShift Pipelines 1.15 | *, *, registry.redhat.io/openshift-pipelines/pipelines-triggers-webhook-rhel8@sha256:5f68ba66d17d612702cc47916df916b751c3b8d71faa094f1a174cb4338c3d68_ppc64le |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-triggers-core-interceptors-rhel8@sha256:26d9157c1a6c7d0cfcde263a0a17b15cca996b2b79c6cf0168a16304068c6abc_s390x as a component of Red Hat OpenShift Pipelines 1.15 | *, *, * |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-triggers-eventlistenersink-rhel8@sha256:a0663bcada815073c34ec07a99cd53242db85e933912c48b5ed25892ccfa4eb1_arm64 as a component of Red Hat OpenShift Pipelines 1.15 | registry.redhat.io/openshift-pipelines/pipelines-triggers-eventlistenersink-rhel8@sha256:a0663bcada815073c34ec07a99cd53242db85e933912c48b5ed25892ccfa4eb1_arm64, *, registry.redhat.io/openshift-pipelines/pipelines-triggers-eventlistenersink-rhel8@sha256:a0663bcada815073c34ec07a99cd53242db85e933912c48b5ed25892ccfa4eb1_arm64 |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-resolvers-rhel8@sha256:37002485d6cf0f0ce261894d23db0bf94291fa7a121a154d15e5e4dcde20961f_arm64 as a component of Red Hat OpenShift Pipelines 1.15 | *, *, * |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-controller-rhel8@sha256:25c1f3d9abd1e123e2a11e5349c0b59eb24238a10dc16e01e59976d061ea7af7_arm64 as a component of Red Hat OpenShift Pipelines 1.15 | registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-controller-rhel8@sha256:25c1f3d9abd1e123e2a11e5349c0b59eb24238a10dc16e01e59976d061ea7af7_arm64, registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-controller-rhel8@sha256:25c1f3d9abd1e123e2a11e5349c0b59eb24238a10dc16e01e59976d061ea7af7_arm64, * |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-webhook-rhel8@sha256:14e1402c0d2f4d449146471fff84f6548affdbcd81d1864bce0d29c29ccb15bd_s390x as a component of Red Hat OpenShift Pipelines 1.15 | registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-webhook-rhel8@sha256:14e1402c0d2f4d449146471fff84f6548affdbcd81d1864bce0d29c29ccb15bd_s390x, *, registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-webhook-rhel8@sha256:14e1402c0d2f4d449146471fff84f6548affdbcd81d1864bce0d29c29ccb15bd_s390x |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-controller-rhel8@sha256:739b8da7ebcad332129f65fee9e17f2b29370b1f68c030e3751d2f37ed4f9326_amd64 as a component of Red Hat OpenShift Pipelines 1.15 | registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-controller-rhel8@sha256:739b8da7ebcad332129f65fee9e17f2b29370b1f68c030e3751d2f37ed4f9326_amd64, *, * |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-webhook-rhel8@sha256:bba628b46144f5d52f4a6e303d1b90c9a7f4a0a7b3f0c13839f9f795da874254_arm64 as a component of Red Hat OpenShift Pipelines 1.15 | registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-webhook-rhel8@sha256:bba628b46144f5d52f4a6e303d1b90c9a7f4a0a7b3f0c13839f9f795da874254_arm64, registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-webhook-rhel8@sha256:bba628b46144f5d52f4a6e303d1b90c9a7f4a0a7b3f0c13839f9f795da874254_arm64, registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-webhook-rhel8@sha256:bba628b46144f5d52f4a6e303d1b90c9a7f4a0a7b3f0c13839f9f795da874254_arm64 |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-controller-rhel8@sha256:7b61bda6116f3f1e93c856543ade553b0a1e4353542f5147da6929a5a8adbac3_s390x as a component of Red Hat OpenShift Pipelines 1.15 | *, *, registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-controller-rhel8@sha256:7b61bda6116f3f1e93c856543ade553b0a1e4353542f5147da6929a5a8adbac3_s390x |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-hub-db-migration-rhel8@sha256:fdd2f4bffececf03b6566cf573fdf6224495d79a75ad1031219fad9902d7a3f1_ppc64le as a component of Red Hat OpenShift Pipelines 1.15 | registry.redhat.io/openshift-pipelines/pipelines-hub-db-migration-rhel8@sha256:fdd2f4bffececf03b6566cf573fdf6224495d79a75ad1031219fad9902d7a3f1_ppc64le, *, * |
…and 191 more
Timeline
- Mar 4, 2026 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:3710 advisory
- https://access.redhat.com/security/cve/CVE-2024-37890 advisory
- https://access.redhat.com/security/cve/CVE-2025-12816 advisory
- https://access.redhat.com/security/cve/CVE-2025-13465 advisory
- https://access.redhat.com/security/cve/CVE-2025-15284 advisory
- https://access.redhat.com/security/cve/CVE-2025-6545 advisory
- https://access.redhat.com/security/cve/CVE-2025-6547 advisory
- https://access.redhat.com/security/cve/CVE-2025-66031 advisory
- https://access.redhat.com/security/cve/CVE-2025-66506 advisory
- https://access.redhat.com/security/cve/CVE-2025-66564 advisory
- https://access.redhat.com/security/cve/CVE-2025-9287 advisory
- https://access.redhat.com/security/cve/CVE-2025-9288 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://docs.redhat.com/en/documentation/red_hat_openshift_pipelines advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3710.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2292777 issue
- https://www.cve.org/CVERecord?id=CVE-2024-37890 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-37890 advisory
- https://github.com/websockets/ws/security/advisories/GHSA-3h5v-q93c-6h6q advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2374370 issue
…and 51 more