Redhat Openshift Dev Spaces — known CVE vulnerabilities

Every CVE whose affected-product data names Redhat Openshift Dev Spaces, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2026-12856 — CVSS 8.8 (high): A flaw was found in the vscode-java extension, which provides Java language support for Visual Studio Code. The extension incorrectly…
• CVE-2023-44487 — CVSS 7.5 (high) — actively exploited: The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly…
• CVE-2023-48795 — CVSS 5.9 (medium): The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to…