[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkrqEZ8w_qrj1ZxIAiyaJ8gRIX6y6JEGET7W3AJtuntw":3,"g5a-ex:redhat\u002Fdeveloper_tools@*":104,"g5a-family:redhat\u002Fdeveloper_tools":106},{"success":4,"data":5},true,{"product":6,"versions":18,"topVulnerabilitiesByEpss":20,"kevVulnerabilities":81,"seoMetadata":82,"meta":101},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":17},"redhat","developer_tools",1,15,0,"2022-08-26",[14],{"version":15,"cve_count":10,"kev_count":11,"has_kev":16},"1.0",false,"Developer Tools by Redhat is a technology product with 1 tracked version and 15 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[19],{"version":15,"cve_count":10,"kev_count":11,"has_kev":16},[21,29,36,41,46,52,57,64,69,75],{"cveId":22,"description":23,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":28},"CVE-2019-9514","Some HTTP\u002F2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that should solicit a stream of RST_STREAM frames from the peer. Depending on how the peer queues the RST_STREAM frames, this can consume excess memory, CPU, or both.","2019-08-13",7.5,"v3.1","High",0.82813,{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"cvssVersion":26,"severity":34,"isKev":16,"epssScore":35},"CVE-2017-15041","Go before 1.8.4 and 1.9.x before 1.9.1 allows \"go get\" remote command execution. Using custom domains, it is possible to arrange things so that example.com\u002Fpkg1 points to a Subversion repository but example.com\u002Fpkg1\u002Fpkg2 points to a Git repository. If the Subversion repository includes a Git checkout in its pkg2 directory and some other work is done to ensure the proper ordering of operations, \"go get\" can be tricked into reusing this Git checkout for the fetch of code from pkg2. If the Subversion repository's Git checkout has malicious commands in .git\u002Fhooks\u002F, they will execute on the system running \"go get.\"","2017-10-05",9.8,"Critical",0.09301,{"cveId":37,"description":38,"publishedDate":39,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":40},"CVE-2019-16276","Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.","2019-09-30",0.05299,{"cveId":42,"description":43,"publishedDate":44,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":45},"CVE-2019-17596","Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack scenarios, such as traffic from a client to a server that verifies client certificates.","2019-10-24",0.04693,{"cveId":47,"description":48,"publishedDate":49,"cvssScore":50,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":51},"CVE-2022-1227","A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem, leading to information disclosure or denial of service.","2022-04-29",8.8,0.04171,{"cveId":53,"description":54,"publishedDate":55,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":56},"CVE-2018-16871","A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mount an exported NFS filesystem, is able to trigger a null pointer dereference by using an invalid NFS sequence. This can panic the machine and deny access to the NFS server. Any outstanding disk writes to the NFS server will be lost.","2019-07-30",0.02704,{"cveId":58,"description":59,"publishedDate":60,"cvssScore":61,"cvssVersion":26,"severity":62,"isKev":16,"epssScore":63},"CVE-2019-9741","An issue was discovered in net\u002Fhttp in Go 1.11.5. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the second argument to http.NewRequest with \\r\\n followed by an HTTP header or a Redis command.","2019-03-13",6.1,"Medium",0.02196,{"cveId":65,"description":66,"publishedDate":67,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":68},"CVE-2022-27649","A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby (Docker Engine), where containers were started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs.","2022-04-04",0.01429,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":73,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":74},"CVE-2022-1011","A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation.","2022-03-18",7.8,0.01169,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":79,"cvssVersion":26,"severity":62,"isKev":16,"epssScore":80},"CVE-2021-3744","A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers\u002Fcrypto\u002Fccp\u002Fccp-ops.c, which allows attackers to cause a denial of service (memory consumption). This vulnerability is similar with the older CVE-2019-18808.","2022-03-04",5.5,0.00533,[],{"title":83,"metaDescription":84,"keywords":85,"structuredData":86},"Developer Tools by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Developer Tools by Redhat covering 1 version with 15 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Developer Tools vulnerabilities, Developer Tools security, Developer Tools CVE, Redhat Developer Tools, Developer Tools threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":87,"@type":88,"name":89,"description":84,"url":90,"manufacturer":91,"applicationCategory":95,"softwareVersion":96,"mainEntity":97},"https:\u002F\u002Fschema.org","SoftwareApplication","Developer Tools","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fdeveloper_tools",{"@type":92,"name":93,"url":94},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","1 versions tracked",{"@type":98,"name":99,"description":100,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Developer Tools Security Vulnerabilities","Security vulnerabilities affecting Developer Tools by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":102,"apiVersion":103},"2026-10-18T15:47:29.433Z","3.0",{"rows":105,"total":11,"capped":16,"failed":11},[],[]]