Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Enterprise Linux 9/fido-device-onboard
Red Hat
· Package
8 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Tokio: Race condition in `tokio::time::Interval`
CVE-2026-115567 · GHSA-5WJR-9356-4WC8
Version ranges need review.
tokio
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
Rust / Cargo
Red Hat
Medium
Fix reported
2026-10-24
rust-openssl ssl::select_next_proto use after free
CVE-2025-24898 · GHSA-RPMJ-RPGJ-QMPM
Version ranges need review.
openssl
Red Hat Enterprise Linux 10/rust-bootupd
Rust / Cargo
Red Hat
Medium
Fix reported
2026-10-12
multer vulnerable to Denial of Service via file descriptor leak on aborted uploads
CVE-2026-77037 · GHSA-QFVM-CV95-JQJF
multer
Logging Subsystem for Red Hat OpenShift/openshift-logging/vector-rhel9
npm
Red Hat
High
Fix reported
2026-09-09
multer vulnerable to file size limit bypass via async fileFilter race condition
CVE-2026-77063 · GHSA-QVFW-J98X-7Q72
multer
Logging Subsystem for Red Hat OpenShift/openshift-logging/vector-rhel9
npm
Red Hat
Low
Fix reported
2026-09-09
multer vulnerable to Denial of Service via oversized array index in field names
CVE-2026-82333 · GHSA-535W-7CP7-47Q4
multer
Logging Subsystem for Red Hat OpenShift/openshift-logging/vector-rhel9
npm
Red Hat
High
Fix reported
2026-09-09
nix: Nix: Arbitrary file truncation via time-of-check/time-of-use race
CVE-2026-64846
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
Confidential Compute Attestation/agent-sandbox/agent-sandbox-router
Red Hat
Low
No fix reported
Not recorded
hex: hex: Denial of Service via unconstrained data decompression
CVE-2026-96618
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9
Red Hat
Medium
No fix reported
Not recorded
hex: hex: Terminal output spoofing via unescaped control sequences
CVE-2026-81856
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9
Red Hat
Medium
No fix reported
Not recorded
