Skip to contentRedhat Openshift vulnerabilities
- immutable-js immutable, immutable-js, red hat cluster observability operator 1.5.0 +90 more +92 moreImmutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutableCVE-2026-29063Fix available8.7 High
- linux-nfs nfs-utils, red hat ceph storage 8, enterprise linux 10 +13 more +15 moreNfs-utils: rpc.mountd in the nfs-utils privilege escalationCVE-2025-12801Fix available6.5 Medium
- libssh, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibssh: libssh: denial of service via zero-length input in ssh_get_hexa()CVE-2026-0966Fix available6.5 Medium
- libssh, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibssh: improper sanitation of paths received from scp serversCVE-2026-0964Fix available5.0 Medium
- xmlsoft libxml2, ibm aix, vios +11 more +13 moreLibxml2: libxml2: denial of service via crafted xml catalogsCVE-2026-0992Fix available2.9 Low
- xmlsoft libxml2, ibm aix, vios +11 more +13 moreLibxml2: unbounded relaxng include recursion leading to stack overflowCVE-2026-0989Fix available3.7 Low
- xmlsoft libxml2, ibm aix, vios +11 more +13 moreLibxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processingCVE-2026-0990Fix available5.9 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +27 more +29 moreGlib: integer overflow in glib gio attribute escaping causes heap buffer overflowCVE-2025-14512Fix available6.5 Medium
- gnome glib, red hat ceph storage 8, discovery 2 +58 more +60 moreGlib: integer overflow in in g_escape_uri_string()CVE-2025-13601Fix available7.7 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +3 more +5 moreNetavark: podman: netavark may resolve hostnames to unexpected hostsCVE-2025-8283Fix available3.7 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 morePolkit: xml policy file with a large number of nested elements may lead to out-of-bounds writeCVE-2025-7519Fix available6.7 Medium
- gnome libxslt, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibxslt: type confusion in xmlnode.psvi between stylesheet and source nodesCVE-2025-7424Fix available7.5 High
- gnu gnutls, red hat ceph storage 7, discovery 2 +12 more +14 moreGnutls: vulnerability in gnutls certtool template parsingCVE-2025-32990Fix available6.5 Medium
- gnu gnutls, red hat ceph storage 7, discovery 2 +15 more +17 moreGnutls: vulnerability in gnutls sct extension parsingCVE-2025-32989Fix available5.3 Medium
- gnu gnutls, red hat ceph storage 7, discovery 2 +15 more +17 moreGnutls: vulnerability in gnutls othername san exportCVE-2025-32988Fix available6.5 Medium
- libssh, red hat enterprise linux 10, enterprise linux 6 +13 more +15 moreLibssh: incorrect return code handling in ssh_kdf() in libsshCVE-2025-5372Fix available5.0 Medium
- libssh, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreLibssh: double free vulnerability in libssh key export functionsCVE-2025-5351Fix available6.5 Medium
- libssh, red hat ai inference server 3.2, enterprise linux 10 +25 more +27 moreLibssh: out-of-bounds read in sftp_handle()CVE-2025-5318Fix available5.4 Medium
- xmlsoft libxml2, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +34 more +36 moreLibxml2: stack buffer overflow in xmllint interactive shell command handlingCVE-2025-6170Fix available2.5 Low
- xmlsoft libxml2, red hat discovery 2, enterprise linux 10 +46 more +48 moreLibxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2CVE-2025-6021Fix available7.5 High
- libarchive, red hat cert-manager operator for red hat openshift 1.16, openshift compliance operator 1 +35 more +37 moreLibarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.cCVE-2025-5914Fix available7.8 High
- libarchive, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibarchive: reading past eof may be triggered for piped file streamsCVE-2025-5918Fix available3.9 Low
- libarchive, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibarchive: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.cCVE-2025-5917Fix available2.8 Low
- libarchive, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibarchive: integer overflow while reading warc files at archive_read_support_format_warc.cCVE-2025-5916Fix available3.9 Low
- libarchive, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.cCVE-2025-5915Public exploitFix available6.6 Medium
- debian linux, linux kernel, systemd project systemd +14 more +16 moreSystemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dumpCVE-2025-4598Fix available4.7 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreGrub2: squash4: integer overflow may lead to heap based out-of-bounds write when reading dataCVE-2025-0678Fix available7.8 High
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreGrub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382)CVE-2024-45782Fix available7.8 High
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreGrub2: fs/bfs: integer overflow in the bfs parser.CVE-2024-45778Fix available4.1 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreGrub2: grub-core/gettext: integer overflow leads to heap oob write.CVE-2024-45777Fix available6.7 Medium
- openbsd openssh, debian linux, netapp active iq unified manager +15 more +17 moreOpenssh: machine-in-the-middle attack if verifyhostkeydns is enabledCVE-2025-26465Public exploitFix available6.8 Medium
- red hat openshift service mesh 2, redhat openshift service mesh +1 moreEnvoyproxy: openshift service mesh envoy http header sanitization bypass leading to dos and unauthorized accessCVE-2025-07527.1 High
- samba rsync, almalinux, archlinux arch linux +24 more +26 moreRsync: --safe-links option bypass leads to path traversalCVE-2024-12088Fix available6.5 Medium
- samba rsync, almalinux, archlinux arch linux +13 more +15 moreRsync: rsync server leaks arbitrary client filesCVE-2024-12086Fix available6.1 Medium
- samba rsync, almalinux, archlinux arch linux +44 more +46 moreRsync: info leak via uninitialized stack contentsCVE-2024-12085Public exploitFix available7.5 High
- red hat openshift container platform 4.16, openshift container platform 4.17, openshift container platform 4.18 +1 more +3 moreGraphql: information disclosure via graphql introspection in openshiftCVE-2024-503125.3 Medium
- red hat openshift container platform 4.18, redhat openshift container platform +1 moreGraphql: denial of service (dos) vulnerability via graphql batchingCVE-2024-503116.5 Medium
- red hat openshift developer tools and services, enterprise linux 10, enterprise linux 8 +25 more +27 morePodman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)CVE-2024-9676Fix available6.5 Medium
- buildah project buildah, red hat openshift developer tools and services, enterprise linux 10 +30 more +32 moreBuildah: buildah allows arbitrary directory mountCVE-2024-9675Fix available7.8 High
- containers common, red hat enterprise linux 10, enterprise linux 8 +10 more +12 morePodman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go libraryCVE-2024-9341Fix available5.4 Medium
- red hat build of keycloak, build of keycloak 22, build of keycloak 24 +13 more +15 moreKeycloak: vulnerable redirect uri validation results in open redirecCVE-2024-8883Fix available6.1 Medium
- redhat keycloak, red hat build of keycloak, build of keycloak 22 +11 more +13 moreKeycloak: potential bypass of brute force protectionCVE-2024-4629Fix available6.5 Medium
- redhat openshift ai, red hat openshift data science (rhods), rhoai-2.14-rhel-8 +1 more +3 moreOdh-dashboard: odh-model-controller: cross-model authentication bypass in openshift aiCVE-2024-75578.8 High
- podman project podman, fedoraproject fedora, red hat enterprise linux 10 +7 more +9 morePodman: kernel: containers in shared ipc namespace are vulnerable to denial of service attackCVE-2024-3056Fix available7.7 High
- red hat openshift container platform 3.11, openshift container platform 4, redhat openshift container platform +2 moreOpenshift-console: unauthenticated installation of helm chartsCVE-2024-70796.5 Medium
- openbsd openssh, almalinux, amazon linux +71 more +73 moreOpenssh: regresshion - race condition in ssh allows rce/dosCVE-2024-6387Public exploitFix availableEPSS 99.5%8.1 High
- red hat logging subsystem for red hat openshift, openshift container platform 4.12, openshift container platform 4.13 +7 more +9 moreOpenshift/telemeter: iss check during jwt authentication can be bypassedCVE-2024-50377.5 High
- kubernetes cri-o, red hat enterprise linux 8, enterprise linux 9 +8 more +10 moreCri-o: malicious container can create symlink on hostCVE-2024-5154Fix available8.1 High
- redhat keycloak, red hat migration toolkit for runtimes 1 on rhel 8, mta-6.2-rhel-9 +26 more +28 moreKeycloak: path transversal in redirection validationCVE-2024-1132Fix available8.1 High
- mholt archiver, red hat advanced cluster security 3, advanced cluster security 4 +3 more +5 moreMholt/archiver: path traversal vulnerabilityCVE-2024-0406Public exploitFix available6.1 Medium
- Show moreLoading…