Skip to contentRed Hat Openstack Platform 18.0 vulnerabilities
- ultrajson, red hat openstack platform 16.2, openstack platform 17.1 +1 more +3 moreUltraJSON has a Memory Leak parsing large integers allows DoSCVE-2026-32874Fix available7.5 High
- pyasn1, red hat migration toolkit for containers, migration toolkit for virtualization +40 more +42 morepyasn1 Vulnerable to Denial of Service via Unbounded RecursionCVE-2026-30922Fix available7.5 High
- github.com/buger/jsonparser, jsonparser project jsonparser, red hat cluster observability operator 1.5.0 +17 more +19 moreDenial of service in github.com/buger/jsonparserCVE-2026-32285Fix available7.5 High
- pyca pyopenssl, red hat confidential compute attestation, exploit intelligence +37 more +39 morepyOpenSSL DTLS cookie callback buffer overflowCVE-2026-27459Fix available7.2 High
- go standard library crypto/x509, golang go, red hat assisted installer for red hat openshift container platform 2 +99 more +101 moreIncorrect enforcement of email constraints in crypto/x509CVE-2026-27137Fix available7.5 High
- docker compose, cli, command line interface +27 more +29 moreDocker Desktop Docker Plugins Uncontrolled Search Path Element Local Privilege Escalation VulnerabilityCVE-2025-15558Fix available7.0 High
- openstack nova, red hat openstack platform 13 (queens), openstack platform 16.2 +4 more +6 moreOpenStack Nova calls qemu-img without format restrictions for resizeCVE-2026-24708Fix available8.2 High
- djangoproject django, red hat ansible automation platform 2, ansible automation platform 2.5 +15 more +17 morePotential SQL injection via QuerySet.order_by and FilteredRelationCVE-2026-1312Public exploitFix available5.4 Medium
- djangoproject django, red hat ansible automation platform 2, ansible automation platform 2.5 +15 more +17 morePotential SQL injection in column aliases via control charactersCVE-2026-1287Fix available5.4 Medium
- djangoproject django, red hat ansible automation platform 2, ansible automation platform 2.5 +15 more +17 morePotential SQL injection via raster lookups on PostGISCVE-2026-1207Public exploitFix availableEPSS 12.8%5.4 Medium
- dabeaz ply, red hat fence agents remediation operator, migration toolkit for containers +25 more +27 moreAn undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code...CVE-2025-56005Public exploitFix availableDisputedEPSS 18.8%9.8 Critical
- openstack keystonemiddleware, red hat openshift container platform 4.17, openshift container platform 4.18 +7 more +9 moreAn issue was discovered in OpenStack keystonemiddleware 10.5 through 10.7 before 10.7.2, 10.8 and...CVE-2026-22797Fix available9.9 Critical
- go standard library net/url, golang go, red hat assisted installer for red hat openshift container platform 2 +160 more +162 moreMemory exhaustion in query parameter parsing in net/urlCVE-2025-61726Fix available7.5 High
- python urllib3, red hat assisted installer for red hat openshift container platform 2, cert-manager operator for red hat openshift 1.18 +105 more +107 moreurllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)CVE-2026-21441Fix available8.9 High
- ansible-collections ansible community general collection, red hat ceph storage 5, ceph storage 6 +5 more +7 moreAnsible-collection-community-general: ansible-collection-community-general: keycloak user module leaks credentials in verbose outputCVE-2025-14010Fix available5.5 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +5 more +7 moreUnbound: heap-buffer-overflow in unboundCVE-2024-43168Fix available4.8 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +5 more +7 moreUnbound: null pointer dereference in unboundCVE-2024-43167Fix available2.8 Low
- red hat openstack platform 16.1, openstack platform 16.2, openstack platform 17.1 for rhel 9 +1 more +3 moreEtcd: incomplete fix for cve-2023-39325/cve-2023-44487 in openstack platformCVE-2024-44387.5 High
- red hat openstack platform 16.1, openstack platform 16.2, openstack platform 17.1 +1 more +3 moreEtcd: incomplete fix for cve-2021-44716 in openstack platformCVE-2024-44377.5 High
- red hat openstack platform 16.1, openstack platform 16.2, openstack platform 17.1 +1 more +3 moreEtcd: incomplete fix for cve-2022-41723 in openstack platformCVE-2024-44367.5 High
- red hat nbde tang server, openshift developer tools and services, openshift pipelines +32 more +34 moreGolang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloadsCVE-2024-1394Fix available7.5 High
- red hat openstack platform 16.1, openstack platform 16.2, openstack platform 17.1 +4 more +6 moreTripleo-ansible: bind keys are world readableCVE-2023-6725Fix available5.5 Medium
- red hat openstack platform 16.1, openstack platform 16.2, openstack platform 17.0 +3 more +5 moreOpenstack: deleting a non existing access rule deletes another existing access rule in it's scopeCVE-2023-6110Fix available5.5 Medium
- openstack glance-store, red hat openstack platform 16.1, openstack platform 16.2 +2 more +4 moreGlance-store: glance store access key logged in debug log levelCVE-2024-1141Fix available5.5 Medium
- red hat openstack platform 13 (queens) operational tools, openstack platform 16.1, openstack platform 16.2 +4 more +6 moreOpenstack-neutron: unrestricted creation of security groups (fix for cve-2022-3277)CVE-2023-3637Fix available4.3 Medium
- golang net, golang.org/x/net golang.org/x/net/idna, go standard library net/http +147 more +149 moreInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idnaCVE-2026-39821Fix available9.6 Critical
- openstack keystone, red hat openstack folsom for rhel 6, openstack platform 13 (queens) +3 more +5 moreKeystone: openstack keystone: denial of service via large http request with long tenant nameCVE-2013-0270Fix available6.5 Medium
- openstack glance, red hat openstack folsom for rhel 6, openstack platform 16.2 +2 more +4 moreOpenstack glance: swift: s3: openstack glance: information disclosure of backend credentials via cached image requestCVE-2013-1840Fix available6.5 Medium
- openstack essex, folsom, grizzly +6 more +8 moreOpenstack nova: vnc proxy can connect to the wrong vmCVE-2013-0335Fix available7.6 High
- openstack folsom, grizzly, red hat openstack folsom for rhel 6 +3 more +5 moreOpenstack nova: information leak in libvirt lvm-backed instancesCVE-2012-5625Fix available6.5 Medium
- openstack essex, folsom, red hat openstack essex for rhel 6 +5 more +7 moreOpenstack keystone: openstack keystone: authorization bypass via improper ec2 token handlingCVE-2012-5571Fix available5.4 Medium