Skip to contentRed Hat Openshift Container Platform 4 vulnerabilities
- linux-nfs nfs-utils, red hat ceph storage 8, enterprise linux 10 +13 more +15 moreNfs-utils: rpc.mountd in the nfs-utils privilege escalationCVE-2025-12801Fix available6.5 Medium
- kernel util-linux, red hat enterprise linux 10, enterprise linux 7 +4 more +6 moreUtil-linux: util-linux: access control bypass due to improper hostname canonicalizationCVE-2026-3184Fix available3.7 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu-kvm: virtio-snd: integer overflow leading to unbounded memory allocationCVE-2026-3196Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb (incomplete fix for cve-2024-7730)CVE-2026-3195Fix available7.4 High
- aws aws-lc, amazon aws-lc-sys, aws libcrypto +7 more +9 morePKCS7_verify Signature Validation Bypass in AWS-LCCVE-2026-3338Fix available8.7 High
- aws aws-lc, amazon aws-lc-sys, aws libcrypto +7 more +9 morePKCS7_verify Certificate Chain Validation Bypass in AWS-LCCVE-2026-3336Fix available8.7 High
- nest.js, nestjs nest, red hat developer hub +1 more +3 moreNestJS 11.1.13 - Lack of data validation allowing authentication/authorization bypassCVE-2026-2293Fix available8.2 High
- koajs koa, red hat developer hub, openshift ai (rhoai) +4 more +6 moreKoa has Host Header Injection via `ctx.hostname`CVE-2026-27959Public exploitFix available7.5 High
- rollup, red hat openshift pipelines, openshift service mesh 3 +26 more +28 moreRollup 4 has Arbitrary File Write via Path TraversalCVE-2026-27606Public exploitFix available8.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu-kvm: heap buffer out-of-bounds read in vmdk compressed grain parsingCVE-2026-2243Fix available5.1 Medium
- katacontainers kata containers, kata-containers, red hat confidential compute attestation +1 more +3 moreKata Container to Guest micro VM privilege escalationCVE-2026-24834Fix available9.4 Critical
- libssh, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreLibssh: libssh: denial of service due to malformed sftp messageCVE-2026-0968Fix available3.1 Low
- libssh, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreLibssh: libssh: denial of service via inefficient regular expression processingCVE-2026-0967Fix available2.2 Low
- libssh, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibssh: libssh: denial of service via zero-length input in ssh_get_hexa()CVE-2026-0966Fix available6.5 Medium
- libssh, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreLibssh: libssh: denial of service via improper configuration file handlingCVE-2026-0965Fix available3.3 Low
- libssh, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibssh: improper sanitation of paths received from scp serversCVE-2026-0964Fix available5.0 Medium
- ajv.js ajv, red hat confidential compute attestation, cryostat 4 +67 more +69 moreajv has ReDoS when using `$data` optionCVE-2025-69873Fix available2.9 Low
- libpng, red hat ai inference server 3.3, build of openjdk 1.8 +34 more +36 moreLIBPNG has a heap buffer overflow in png_set_quantizeCVE-2026-25646Fix available8.3 High
- gnu gnutls, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreGnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binderCVE-2026-1584Fix available7.5 High
- axios, red hat cryostat 4, gatekeeper 3 +63 more +65 moreAxios affected by Denial of Service via __proto__ Key in mergeConfigCVE-2026-25639Fix available7.5 High
- red hat cert manager support for red hat openshift release 1.18, ai inference server 3.2, ai inference server 3.3 +23 more +25 moreGnutls: gnutls: denial of service via excessive resource consumption during certificate verificationCVE-2025-14831Fix available5.3 Medium
- microsoft p11-kit, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +16 more +18 moreP11-kit: null dereference via c_derivekey with specific null parametersCVE-2026-2100Fix available5.3 Medium
- go toolchain cmd/cgo, golang go, red hat enterprise linux 10 +31 more +33 morePotential code smuggling via doc comments in cmd/cgoCVE-2025-61732Fix available8.6 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreLibxml2: memory leak leading to local denial of service in xmllint interactive shellCVE-2026-1757Fix available6.2 Medium
- isaacs node-tar, tar, red hat cryostat 4 +27 more +29 morenode-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path TraversalCVE-2026-24842Fix available8.2 High
- openssl, red hat cost management 4, ai inference server 3.2 +316 more +318 moreStack buffer overflow in CMS (Auth)EnvelopedData parsingCVE-2025-15467Public exploitFix availableEPSS 74.8%8.8 High
- cli, red hat confidential compute attestation, cryostat 4 +32 more +34 morenpm cli Incorrect Permission Assignment Local Privilege Escalation VulnerabilityCVE-2026-0775Fix available7.0 High
- pypa wheel, red hat discovery 2 for rhel 10, discovery 2 for rhel 8 +57 more +59 morewheel Allows Arbitrary File Permission Modification via Path TraversalCVE-2026-24049Public exploitFix available7.1 High
- lodash, lodash lodash-amd, lodash-es +119 more +121 morePrototype Pollution Vulnerability in Lodash _.unset and _.omit functionsCVE-2025-13465Public exploitFix available6.9 Medium
- isc bind 9, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreMalformed BRID/HHIT records can cause named to terminate unexpectedlyCVE-2025-13878Fix available7.5 High
- isaacs node-tar, tar, red hat confidential compute attestation +37 more +39 morenode-tar has Race Condition in Path Reservations via Unicode Ligature Collisions on macOS APFSCVE-2026-23950Fix available8.8 High
- dabeaz ply, red hat fence agents remediation operator, migration toolkit for containers +25 more +27 moreAn undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code...CVE-2025-56005Public exploitFix availableDisputedEPSS 18.8%9.8 Critical
- openstack keystonemiddleware, red hat openshift container platform 4.17, openshift container platform 4.18 +7 more +9 moreAn issue was discovered in OpenStack keystonemiddleware 10.5 through 10.7 before 10.7.2, 10.8 and...CVE-2026-22797Fix available9.9 Critical
- pyasn1, debian linux, red hat lightspeed core +48 more +50 morepyasn1 has a DoS vulnerability in decoderCVE-2026-23490Fix available7.5 High
- go toolchain cmd/go, golang go, red hat enterprise linux 10 +30 more +32 moreArbitrary file write using cgo pkg-config directive in cmd/goCVE-2025-61731Fix available7.8 High
- go standard library net/url, golang go, red hat assisted installer for red hat openshift container platform 2 +160 more +162 moreMemory exhaustion in query parameter parsing in net/urlCVE-2025-61726Fix available7.5 High
- xmlsoft libxml2, ibm aix, vios +11 more +13 moreLibxml2: libxml2: denial of service via crafted xml catalogsCVE-2026-0992Fix available2.9 Low
- xmlsoft libxml2, ibm aix, vios +11 more +13 moreLibxml2: unbounded relaxng include recursion leading to stack overflowCVE-2026-0989Fix available3.7 Low
- xmlsoft libxml2, ibm aix, vios +11 more +13 moreLibxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processingCVE-2026-0990Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu-kvm: heap off-by-one in kvm xen physdevop_map_pirqCVE-2026-0665Fix available6.5 Medium
- gitlab, red hat openshift pipelines, openshift container platform 4 +2 moreImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2025-9222Fix available8.7 High
- gitlab, red hat openshift pipelines, openshift container platform 4 +2 moreMissing Authorization in GitLabCVE-2025-13772Fix available7.1 High
- gitlab, red hat openshift pipelines, openshift container platform 4 +2 moreImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabCVE-2025-13761Fix available8.0 High
- @tanstack react-router, remix-run @remix-run/router, red hat cryostat 4 +74 more +76 moreReact Router vulnerable to XSS via Open RedirectsCVE-2026-22029Fix available8.0 High
- @tanstack react-router, red hat cryostat 4, gatekeeper 3 +47 more +49 moreReact Router has Path Traversal in File Session StorageCVE-2025-61686Public exploitFix availableEPSS 17.3%9.1 Critical
- ruby zlib, red hat logging subsystem for red hat openshift, build of openjdk 1.8 +14 more +16 morezlib <= 1.3.1.2 untgz Global Buffer Overflow in TGZfname()CVE-2026-22184Fix availableDisputed4.6 Medium
- python urllib3, red hat assisted installer for red hat openshift container platform 2, cert-manager operator for red hat openshift 1.18 +105 more +107 moreurllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)CVE-2026-21441Fix available8.9 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu-kvm: unbounded allocation in virtio-cryptoCVE-2025-14876Fix available5.5 Medium
- red hat openshift container platform 4Ose-openshift-apiserver: openshift api server: server-side request forgery (ssrf) vulnerability in imagestreamimport mechanismCVE-2025-144436.4 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreNetworkmanager: networkmanager file accessCVE-2025-9615Fix available3.3 Low
- Show moreLoading…