Important: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.28.2 Release.

🗓️ 10 Jun 2026 19:42:14Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 12 Views

Red Hat OpenShift Dev Spaces 3.28.2 released with security fixes for Dev Spaces components.

Reporter	Title	Published	Views	Family All 913
IBM Security Bulletins	Security Bulletin: DevOps Test Performance contains vulnerabilities related to use of netty-codec-http	19 May 202619:19	–	ibm
IBM Security Bulletins	Security Bulletin: : Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in dependencies	8 Jun 202614:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in axios, follow-redirects, fast-uri and babel might affect IBM Storage Defender Sentinel Anomaly Scan Engine.	27 Jun 202615:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Bus for z/OS is vulnerable to multiple vulnerabilities due to Apache Tomcat	22 Jun 202613:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affect IBM Decision Optimization for Cloud Pak for Data.	19 Jun 202608:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex	16 Jun 202616:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerabilities in tomcat-embed-core-11.0.20.jar	17 Jun 202615:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	27 May 202606:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is affected by an Improper Input Validation Vulnerability in Netty (CVE-2026-42579)	21 Jul 202621:32	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses cryptography-46.0.6-cp311-abi3-manylinux_2_34_x86_64.whl and tomcat-embed-core-10.1.54.jar which are vulnerable to CVE-2026-39892, CVE-2026-41293, CVE-2026-43512, CVE-2026-43513 and CVE-2026-43515.	30 Jun 202607:44	–	ibm

Source	Link
access	www.access.redhat.com/documentation/en-us/red_hat_openshift_dev_spaces/3.28/html/administration_guide/installing-devspaces
access	www.access.redhat.com/security/cve/CVE-2026-42578
access	www.access.redhat.com/security/cve/CVE-2026-42579
access	www.access.redhat.com/security/cve/CVE-2026-42581
access	www.access.redhat.com/security/cve/CVE-2026-42584
access	www.access.redhat.com/security/cve/CVE-2026-42587
access	www.access.redhat.com/security/cve/CVE-2026-43512
access	www.access.redhat.com/security/cve/CVE-2026-6321
access	www.access.redhat.com/security/updates/classification/

22 Jul 2026 15:02Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.19.8

CVSS 46.3

EPSS0.01233

SSVC

red hat OpenShift Dev Spaces version 3.28.2 security fixes dev spaces components