VDB
RHSA-2026%3A3712
RHSA-2026%3A3712
PUBLISHED
CVSS 5.900000095367432 MEDIUM
A flaw was found in the Node.js WebSocket library (ws). A request with several headers exceeding the 'server.maxHeadersCount' threshold could be used to crash a ws server, leading to a denial of service.
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel8@sha256:b2c21a004712bd198698ea75793e57abbe1665e17479e34d0b5e8c81d60b967d_ppc64le as a component of Red Hat OpenShift Pipelines 1.15 | registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel8@sha256:b2c21a004712bd198698ea75793e57abbe1665e17479e34d0b5e8c81d60b967d_ppc64le, registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel8@sha256:b2c21a004712bd198698ea75793e57abbe1665e17479e34d0b5e8c81d60b967d_ppc64le, * |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-results-api-rhel8@sha256:cea3159fd16b609ef54d99bf435f72c142f0f7ecbbe3c3eaa9dd2035267395d2_amd64 as a component of Red Hat OpenShift Pipelines 1.15 | *, registry.redhat.io/openshift-pipelines/pipelines-results-api-rhel8@sha256:cea3159fd16b609ef54d99bf435f72c142f0f7ecbbe3c3eaa9dd2035267395d2_amd64, * |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-triggers-webhook-rhel8@sha256:5f68ba66d17d612702cc47916df916b751c3b8d71faa094f1a174cb4338c3d68_ppc64le as a component of Red Hat OpenShift Pipelines 1.15 | *, registry.redhat.io/openshift-pipelines/pipelines-triggers-webhook-rhel8@sha256:5f68ba66d17d612702cc47916df916b751c3b8d71faa094f1a174cb4338c3d68_ppc64le, registry.redhat.io/openshift-pipelines/pipelines-triggers-webhook-rhel8@sha256:5f68ba66d17d612702cc47916df916b751c3b8d71faa094f1a174cb4338c3d68_ppc64le |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-events-rhel8@sha256:898085897ff200fdba4d6c14b59548c7fe53164a8c2649e2263a69116737edbf_amd64 as a component of Red Hat OpenShift Pipelines 1.15 | registry.redhat.io/openshift-pipelines/pipelines-events-rhel8@sha256:898085897ff200fdba4d6c14b59548c7fe53164a8c2649e2263a69116737edbf_amd64, registry.redhat.io/openshift-pipelines/pipelines-events-rhel8@sha256:898085897ff200fdba4d6c14b59548c7fe53164a8c2649e2263a69116737edbf_amd64, registry.redhat.io/openshift-pipelines/pipelines-events-rhel8@sha256:898085897ff200fdba4d6c14b59548c7fe53164a8c2649e2263a69116737edbf_amd64 |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-hub-api-rhel8@sha256:dbb678695a4bd07c27a14fec9b70359929bf0d4d33d9ce2d70d1b5157e5026c1_arm64 as a component of Red Hat OpenShift Pipelines 1.15 | registry.redhat.io/openshift-pipelines/pipelines-hub-api-rhel8@sha256:dbb678695a4bd07c27a14fec9b70359929bf0d4d33d9ce2d70d1b5157e5026c1_arm64, registry.redhat.io/openshift-pipelines/pipelines-hub-api-rhel8@sha256:dbb678695a4bd07c27a14fec9b70359929bf0d4d33d9ce2d70d1b5157e5026c1_arm64, registry.redhat.io/openshift-pipelines/pipelines-hub-api-rhel8@sha256:dbb678695a4bd07c27a14fec9b70359929bf0d4d33d9ce2d70d1b5157e5026c1_arm64 |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-events-rhel8@sha256:001e28b882e81e4d424b2e1a39933211f15e68048406a6432e6ec59e4b96cc2c_ppc64le as a component of Red Hat OpenShift Pipelines 1.15 | *, registry.redhat.io/openshift-pipelines/pipelines-events-rhel8@sha256:001e28b882e81e4d424b2e1a39933211f15e68048406a6432e6ec59e4b96cc2c_ppc64le, * |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-triggers-core-interceptors-rhel8@sha256:7a4aa11a1273f668d89230adaa720b4e1fcea0cbaa57c63fa01a2cf6867d981c_ppc64le as a component of Red Hat OpenShift Pipelines 1.15 | registry.redhat.io/openshift-pipelines/pipelines-triggers-core-interceptors-rhel8@sha256:7a4aa11a1273f668d89230adaa720b4e1fcea0cbaa57c63fa01a2cf6867d981c_ppc64le, registry.redhat.io/openshift-pipelines/pipelines-triggers-core-interceptors-rhel8@sha256:7a4aa11a1273f668d89230adaa720b4e1fcea0cbaa57c63fa01a2cf6867d981c_ppc64le, * |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-watcher-rhel8@sha256:8ce8fce1d1e1acd9fb44dc4d5797e57fe8e349624f6c7b1351757d7d6143b679_amd64 as a component of Red Hat OpenShift Pipelines 1.15 | *, *, * |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-webhook-rhel8@sha256:14e1402c0d2f4d449146471fff84f6548affdbcd81d1864bce0d29c29ccb15bd_s390x as a component of Red Hat OpenShift Pipelines 1.15 | registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-webhook-rhel8@sha256:14e1402c0d2f4d449146471fff84f6548affdbcd81d1864bce0d29c29ccb15bd_s390x, *, registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-webhook-rhel8@sha256:14e1402c0d2f4d449146471fff84f6548affdbcd81d1864bce0d29c29ccb15bd_s390x |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel8@sha256:494857108f0b09c8b8985062cc11b9879d126b207fcd72f6abb64ded3d8d1793_ppc64le as a component of Red Hat OpenShift Pipelines 1.15 | registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel8@sha256:494857108f0b09c8b8985062cc11b9879d126b207fcd72f6abb64ded3d8d1793_ppc64le, registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel8@sha256:494857108f0b09c8b8985062cc11b9879d126b207fcd72f6abb64ded3d8d1793_ppc64le, registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel8@sha256:494857108f0b09c8b8985062cc11b9879d126b207fcd72f6abb64ded3d8d1793_ppc64le |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-results-watcher-rhel8@sha256:8969e863a2ac74d0ab37812bd0aa5d86f261b97d0c2fecd0f35d2343c2f5bd67_ppc64le as a component of Red Hat OpenShift Pipelines 1.15 | registry.redhat.io/openshift-pipelines/pipelines-results-watcher-rhel8@sha256:8969e863a2ac74d0ab37812bd0aa5d86f261b97d0c2fecd0f35d2343c2f5bd67_ppc64le, registry.redhat.io/openshift-pipelines/pipelines-results-watcher-rhel8@sha256:8969e863a2ac74d0ab37812bd0aa5d86f261b97d0c2fecd0f35d2343c2f5bd67_ppc64le, registry.redhat.io/openshift-pipelines/pipelines-results-watcher-rhel8@sha256:8969e863a2ac74d0ab37812bd0aa5d86f261b97d0c2fecd0f35d2343c2f5bd67_ppc64le |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-cli-rhel8@sha256:46612f85239df62f6c6d3684367e34a06ddf3982754d5d130b5c0d77f587deea_ppc64le as a component of Red Hat OpenShift Pipelines 1.15 | registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-cli-rhel8@sha256:46612f85239df62f6c6d3684367e34a06ddf3982754d5d130b5c0d77f587deea_ppc64le, *, registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-cli-rhel8@sha256:46612f85239df62f6c6d3684367e34a06ddf3982754d5d130b5c0d77f587deea_ppc64le |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel8@sha256:b7b03dd023aafe65290969336bcf9e0b7a241c3510dcb3d26519581ba4eed719_arm64 as a component of Red Hat OpenShift Pipelines 1.15 | registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel8@sha256:b7b03dd023aafe65290969336bcf9e0b7a241c3510dcb3d26519581ba4eed719_arm64, registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel8@sha256:b7b03dd023aafe65290969336bcf9e0b7a241c3510dcb3d26519581ba4eed719_arm64, registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel8@sha256:b7b03dd023aafe65290969336bcf9e0b7a241c3510dcb3d26519581ba4eed719_arm64 |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-hub-db-migration-rhel8@sha256:0a12cf22aa798dbc3661f7e83aa9c280fe394de5b0ecc6ed7c93be1df539fce9_s390x as a component of Red Hat OpenShift Pipelines 1.15 | *, *, * |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-webhook-rhel8@sha256:f2ee01a1a497bd505ca1289290c0a07eda82901e698079fe1bc6557519d4ee99_s390x as a component of Red Hat OpenShift Pipelines 1.15 | *, *, * |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-nop-rhel8@sha256:b767a9acd7013d08b744b8155cecbe219bfd7a416a3f1ac3a129d67ab062741a_ppc64le as a component of Red Hat OpenShift Pipelines 1.15 | *, *, * |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-controller-rhel8@sha256:23a535f97d17329cf2a1cc9dde90d4d9e2f3f5d979539a8ef5982e1f6693b144_amd64 as a component of Red Hat OpenShift Pipelines 1.15 | registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-controller-rhel8@sha256:23a535f97d17329cf2a1cc9dde90d4d9e2f3f5d979539a8ef5982e1f6693b144_amd64, registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-controller-rhel8@sha256:23a535f97d17329cf2a1cc9dde90d4d9e2f3f5d979539a8ef5982e1f6693b144_amd64, registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-controller-rhel8@sha256:23a535f97d17329cf2a1cc9dde90d4d9e2f3f5d979539a8ef5982e1f6693b144_amd64 |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-hub-api-rhel8@sha256:dbb678695a4bd07c27a14fec9b70359929bf0d4d33d9ce2d70d1b5157e5026c1_arm64 as a component of Red Hat OpenShift Pipelines 1.15 | registry.redhat.io/openshift-pipelines/pipelines-hub-api-rhel8@sha256:dbb678695a4bd07c27a14fec9b70359929bf0d4d33d9ce2d70d1b5157e5026c1_arm64, *, registry.redhat.io/openshift-pipelines/pipelines-hub-api-rhel8@sha256:dbb678695a4bd07c27a14fec9b70359929bf0d4d33d9ce2d70d1b5157e5026c1_arm64 |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-watcher-rhel8@sha256:8ce8fce1d1e1acd9fb44dc4d5797e57fe8e349624f6c7b1351757d7d6143b679_amd64 as a component of Red Hat OpenShift Pipelines 1.15 | registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-watcher-rhel8@sha256:8ce8fce1d1e1acd9fb44dc4d5797e57fe8e349624f6c7b1351757d7d6143b679_amd64, registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-watcher-rhel8@sha256:8ce8fce1d1e1acd9fb44dc4d5797e57fe8e349624f6c7b1351757d7d6143b679_amd64, registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-watcher-rhel8@sha256:8ce8fce1d1e1acd9fb44dc4d5797e57fe8e349624f6c7b1351757d7d6143b679_amd64 |
| Red Hat | registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:5c78dfe2380653f0167358565c8b7cab1010321a4eda27ec931715805ab2c256_amd64 as a component of Red Hat OpenShift Pipelines 1.15 | *, registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@sha256:5c78dfe2380653f0167358565c8b7cab1010321a4eda27ec931715805ab2c256_amd64, * |
…and 192 more
Timeline
- Mar 4, 2026 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:3712 advisory
- https://access.redhat.com/security/cve/CVE-2024-37890 advisory
- https://access.redhat.com/security/cve/CVE-2025-12816 advisory
- https://access.redhat.com/security/cve/CVE-2025-13465 advisory
- https://access.redhat.com/security/cve/CVE-2025-15284 advisory
- https://access.redhat.com/security/cve/CVE-2025-6545 advisory
- https://access.redhat.com/security/cve/CVE-2025-6547 advisory
- https://access.redhat.com/security/cve/CVE-2025-66031 advisory
- https://access.redhat.com/security/cve/CVE-2025-66506 advisory
- https://access.redhat.com/security/cve/CVE-2025-66564 advisory
- https://access.redhat.com/security/cve/CVE-2025-9287 advisory
- https://access.redhat.com/security/cve/CVE-2025-9288 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://docs.redhat.com/en/documentation/red_hat_openshift_pipelines advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3712.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2292777 issue
- https://www.cve.org/CVERecord?id=CVE-2024-37890 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-37890 advisory
- https://github.com/websockets/ws/security/advisories/GHSA-3h5v-q93c-6h6q advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2374370 issue
…and 51 more