Redhat Discovery vulnerabilities

• gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +37 more +39 more Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" CVE-2026-58016 Fix available 7.5 HighJune 30, 2026
• f5 nginx open source, nginx plus, dos +14 more +16 more NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability CVE-2026-42055 Public exploitFix available 9.2 CriticalJune 17, 2026
• axios, red hat cryostat 4, gatekeeper 3 +79 more +81 more Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge CVE-2026-44495 Fix available 7.0 HighMay 29, 2026
• f5 nginx open source, nginx plus, debian linux +15 more +17 more NGINX ngx_http_rewrite_module vulnerability CVE-2026-9256 Public exploitFix available EPSS 10.9% 9.2 CriticalMay 22, 2026
• immutable-js immutable, immutable-js, red hat cluster observability operator 1.5.0 +90 more +92 more Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable CVE-2026-29063 Fix available 8.7 HighMarch 4, 2026
• gnome glib, red hat ceph storage 8, discovery 2 +58 more +60 more Glib: integer overflow in in g_escape_uri_string() CVE-2025-13601 Fix available 7.7 HighNovember 26, 2025
• image-size, red hat gatekeeper 3, build of podman desktop +15 more +17 more image-size 2.0.2 Denial of Service via Infinite Loop in JXL/HEIF Parser CVE-2025-71319 Fix available 8.7 HighApril 2, 2025
• samba rsync, almalinux, archlinux arch linux +24 more +26 more Rsync: --safe-links option bypass leads to path traversal CVE-2024-12088 Fix available 6.5 MediumJanuary 9, 2025
• libtiff, apple ipados, iphone os +21 more +23 more Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service CVE-2023-52356 Public exploitFix available 7.5 HighJanuary 25, 2024
• 9bis kitty, apache sshd, sshj +68 more +70 more Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin CVE-2023-48795 Public exploitFix available EPSS 93.5% 5.9 MediumDecember 18, 2023
• [unknown] systemd, debian linux, redhat ceph storage +7 more +9 more A heap use-after-free vulnerability was found in systemd before version v245-rc1, where... CVE-2020-1712 Public exploitFix available 7.8 HighFebruary 5, 2020