Important: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.29.0 Release.

🗓️ 08 Jul 2026 17:12:17Reported by RedHatType

OpenShift Dev Spaces 3.29.0 adds Eclipse Che 7.119 with devfile two point one and two support; migrate from version one.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge	21 Sep 202606:20	–	ibm
IBM Security Bulletins	Security Bulletin: DevOps Test Performance contains vulnerabilities related to use of netty-codec-http	19 May 202619:19	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in netty-handler-4.1.133.Final.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-44249)	3 Aug 202608:21	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of Netty IBM webMethods Managed File Transfer is vulnerable to Improper Access Control and Allocation of Resources without Limits or Throttling	6 Aug 202613:36	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Netty affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	25 Aug 202618:30	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in netty affects IBM Netezza Appliance	13 Aug 202606:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to Cross-site Scripting due to Node.js modules ip-address and sanitize-html (CVE-2026-53606 & CVE-2026-42338)	23 Jul 202608:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to loss of confidentiality and denial of service due to multiple CVEs	12 Aug 202613:52	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	1 Oct 202615:38	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software	22 Sep 202613:26	–	ibm

Source	Link
access	www.access.redhat.com/documentation/en-us/red_hat_openshift_dev_spaces/3.29/html/administration_guide/installing-devspaces
access	www.access.redhat.com/security/cve/CVE-2026-12151
access	www.access.redhat.com/security/cve/CVE-2026-12856
access	www.access.redhat.com/security/cve/CVE-2026-34986
access	www.access.redhat.com/security/cve/CVE-2026-39821
access	www.access.redhat.com/security/cve/CVE-2026-39829
access	www.access.redhat.com/security/cve/CVE-2026-42338
access	www.access.redhat.com/security/cve/CVE-2026-42578
access	www.access.redhat.com/security/cve/CVE-2026-42579
access	www.access.redhat.com/security/cve/CVE-2026-42581

04 Oct 2026 15:53Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.18.8 - 10

CVSS 48.7

EPSS0.01291

SSVC