Skip to contentRed Hat vulnerabilities
Products
Show 140 moreShow less
Newest
- ruby json, red hat logging subsystem for red hat openshift, 3scale api management platform 2 +6 more +8 moreRuby JSON has a format string injection vulnerabilityCVE-2026-33210Fix available8.3 High
- nltk, red hat lightspeed core, openshift lightspeed +4 more +6 moreNLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File OverwriteCVE-2026-33236Fix available8.1 High
- nltk, red hat lightspeed core, openshift lightspeed +4 more +6 moreNLTK has unauthenticated remote shutdown in nltk.app.wordnet_appCVE-2026-33231Fix available7.5 High
- toddr xml::parser, red hat enterprise linux 10, enterprise linux 10.0 extended update support +17 more +19 moreXML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stackCVE-2006-10003Fix available9.8 Critical
- lfprojects mlflow, mlflow mlflow/mlflow, red hat openshift ai (rhoai) +2 morePath Traversal Vulnerability in mlflow/mlflowCVE-2025-15031Fix available8.1 High
- linuxfoundation tekton pipelines, tektoncd pipeline, red hat builds for red hat openshift +9 more +11 moreTekton Pipelines git resolver has path traversal that allows reading arbitrary files from the resolver podCVE-2026-33211Fix available9.6 Critical
- goxmldsig project goxmldsig, red hat multicluster global hub 1.3.4, multicluster global hub 1.4.5 +10 more +12 moregoxmldsig has validateSignature Loop Variable Capture Signature BypassCVE-2026-33487Fix available7.5 High
- grpc, grpc grpc-go, red hat assisted installer for red hat openshift container platform 2 +166 more +168 moregRPC-Go has an authorization bypass via missing leading slash in :pathCVE-2026-33186Public exploitFix available9.1 Critical
- hapifhir org.hl7.fhir.core, red hat fuse 7 +1 moreHAPI FHIR HTTP authentication leak in redirectsCVE-2026-33180Fix available7.5 High
- nghttp2, red hat jboss core services for rhel 8, jboss core services on rhel 7 +37 more +39 morenghttp2 Denial of service: Assertion failure due to the missing state validationCVE-2026-27135Fix available7.5 High
- jenkins, red hat openshift developer tools and services 4.12, openshift developer tools and services 4.13 +9 more +11 moreJenkins has a link following vulnerability allows arbitrary file creationCVE-2026-33001Fix available8.8 High
- ultrajson, red hat openstack platform 16.2, openstack platform 17.1 +1 more +3 moreUltraJSON has an integer overflow handling large indent leads to buffer overflow or infinite loopCVE-2026-32875Fix available7.5 High
- ultrajson, red hat openstack platform 16.2, openstack platform 17.1 +1 more +3 moreUltraJSON has a Memory Leak parsing large integers allows DoSCVE-2026-32874Fix available7.5 High
- red hat build of keycloak, build of keycloak 26.4, build of keycloak 26.4.12 +5 more +7 moreKeycloak-services: blind server-side request forgery (ssrf) via http redirect handling in keycloakCVE-2026-43665.8 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.10, single sign-on 7.6 for rhel 7 +5 more +7 moreKeycloak: keycloak: denial of service due to excessive samlrequest decompressionCVE-2026-2575Fix available5.3 Medium
- red hat build of keycloak 26.2, build of keycloak 26.2.14, build of keycloak 26.4 +2 more +4 moreKeycloak: keycloak: unauthorized authentication via disabled saml identity providerCVE-2026-2603Fix available8.1 High
- red hat build of keycloak 26.2, build of keycloak 26.2.14, build of keycloak 26.4 +7 more +9 moreKeycloak-services: keycloak: unauthorized access via improper validation of encrypted saml assertionsCVE-2026-2092Fix available7.7 High
- giflib project giflib, red hat ai inference server 3.2, build of openjdk 1.8 +24 more +26 moreBuffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of...CVE-2026-26740Fix available8.2 High
- anyscale ray, red hat ai inference server 3.2, enterprise linux ai (rhel ai) 3 +3 more +5 moreRay Dashboard <= 2.8.0 Path Traversal Leading to Local File DisclosureCVE-2026-32981Fix available8.7 High
- parall jspdf, red hat advanced cluster security 4.8, advanced cluster security 4.9 +2 morejsPDF has HTML Injection in New Window pathsCVE-2026-31938Fix available9.6 Critical
- parall jspdf, red hat advanced cluster security 4.8, advanced cluster security 4.9 +2 morejsPDF has a PDF Object Injection via FreeText colorCVE-2026-31898Fix available8.1 High
- pyasn1, red hat migration toolkit for containers, migration toolkit for virtualization +40 more +42 morepyasn1 Vulnerable to Denial of Service via Unbounded RecursionCVE-2026-30922Fix available7.5 High
- red hat satellite 6, satellite 6.17 for rhel 9, satellite 6.18 for rhel 9 +1 more +3 moreRubygem-katello: katello: denial of service and potential information disclosure via sql injectionCVE-2026-4324Fix available5.4 Medium
- gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +5 more +7 moreLibsoup: libsoup: denial of service via use-after-free in http/2 serverCVE-2026-4271Fix available5.3 Medium
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibsoup: libsoup: http header injection and response splitting via crlf injection in content-type headerCVE-2026-36343.9 Low
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibsoup: libsoup: header and http request injection via crlf injectionCVE-2026-36333.9 Low
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibsoup: libsoup: http smuggling and server-side request forgery via malformed hostnamesCVE-2026-36323.9 Low
- toddr yaml::syck, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 more +4 moreYAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitterCVE-2026-4177Fix available9.1 Critical
- pseitz lz4 flex, red hat logging subsystem for red hat openshift 6.2, logging subsystem for red hat openshift 6.4 +7 more +9 morelz4_flex: Decompression can leak information from uninitialized memory or reused output bufferCVE-2026-32829Fix available8.2 High
- github.com/buger/jsonparser, jsonparser project jsonparser, red hat cluster observability operator 1.5.0 +17 more +19 moreDenial of service in github.com/buger/jsonparserCVE-2026-32285Fix available7.5 High
- github.com/jackc/pgproto3/v2, jackc pgproto3, red hat assisted installer for red hat openshift container platform 2 +26 more +28 moreDenial of service in github.com/jackc/pgproto3/v2CVE-2026-32286Public exploitFix available7.5 High
- linuxfoundation onnx, red hat openshift ai (rhoai), openshift ai 2.25 +2 moreONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain AttackCVE-2026-28500Fix available8.6 High
- pyca pyopenssl, red hat confidential compute attestation, exploit intelligence +37 more +39 morepyOpenSSL DTLS cookie callback buffer overflowCVE-2026-27459Fix available7.2 High
- authlib, red hat lightspeed core, ansible automation platform 2 +7 more +9 moreAuthlib: Fail-Open Cryptographic Verification in OIDC Hash BindingCVE-2026-28498Fix available8.2 High
- authlib, red hat lightspeed core, ansible automation platform 2 +7 more +9 moreAuthlib JWS JWK Header Injection: Signature Verification BypassCVE-2026-27962Fix available9.1 Critical
- jlowin fastmcp, red hat developer hub, openshift ai (rhoai) +1 more +3 moreFastMCP OAuth Proxy token reuse across MCP serversCVE-2025-69196Fix available7.4 High
- lfprojects mlflow, mlflow mlflow/mlflow, red hat openshift ai (rhoai) +2 moreCommand Injection in mlflow/mlflowCVE-2025-14287Fix available7.5 High
- danthedeckie simpleeval, red hat openshift ai (rhoai), openshift ai 2.25 +1 more +3 more(SimpleEval) Objects (including modules) can leak dangerous modules through to direct access inside the sandbox.CVE-2026-32640Fix available8.7 High
- gstreamer, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreGStreamer H.266 Codec Parser Integer Underflow Remote Code Execution VulnerabilityCVE-2026-3084Fix available7.8 High
- gstreamer, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreGStreamer RIFF Palette Integer Overflow Remote Code Execution VulnerabilityCVE-2026-2921Fix available7.8 High
- gstreamer, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreGStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution VulnerabilityCVE-2026-3083Fix available8.8 High
- gstreamer, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreGStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution VulnerabilityCVE-2026-3086Fix available7.8 High
- gstreamer, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreGStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2026-3085Fix available8.8 High
- gstreamer, red hat enterprise linux 10, enterprise linux 10.0 extended update support +17 more +19 moreGStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2026-3082Fix available7.8 High
- gstreamer, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreGStreamer H.266 Codec Parser Stack-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2026-3081Fix available7.8 High
- gstreamer, red hat enterprise linux 10, enterprise linux 10.0 extended update support +5 more +7 moreGStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution VulnerabilityCVE-2026-2923Fix available7.8 High
- gstreamer, red hat enterprise linux 10, enterprise linux 10.0 extended update support +5 more +7 moreGStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution VulnerabilityCVE-2026-2922Fix available7.8 High
- gstreamer, red hat enterprise linux 10, enterprise linux 10.0 extended update support +5 more +7 moreGStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2026-2920Fix available7.8 High
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreFreeRDP has a Heap Buffer Overflow in nsc_process_message() via Unchecked SURFACE_BITS_COMMAND Bitmap DimensionsCVE-2026-31806Fix available9.3 Critical
- red hat cert manager support for red hat openshift release 1.18, ai inference server 3.2, ai inference server 3.3 +22 more +24 moreLibarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchiveCVE-2026-4111Fix available7.5 High
- Show moreLoading…