Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
DPU kit for NVIDIA/dpu-kit-for-nvidia/must-gather-rhel10
Red Hat
· Package
9 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files
CVE-2026-61801 · GHSA-MJCV-P78Q-W5FW
Version ranges need review.
github.com/moby/sys/user
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Medium
Fix reported
2026-10-20
Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder
CVE-2026-89090 · GHSA-XMRV-PMRH-HHX2
Version ranges need review.
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream
github.com/aws/aws-sdk-go-v2/service/bedrockagentcore
Go
Red Hat
Medium
Fix reported
2026-09-12
go-git: Worktree operations may follow symlinks
CVE-2026-71556 · GHSA-HC8V-WWC9-VGXM
Version ranges need review.
github.com/go-git/go-git/v5
github.com/go-git/go-git/v6
Go
Red Hat
High
Fix reported
2026-09-10
go-git: Malicious reference names may modify files outside the reference storage
CVE-2026-71557 · GHSA-QGQ7-7HM3-Q39J
Version ranges need review.
github.com/go-git/go-git/v5
github.com/go-git/go-git/v6
Go
Red Hat
Medium
Fix reported
2026-09-10
moby/go-archive: Crafted tar archive can write outside the extraction directory
CVE-2026-17106 · GHSA-HFG8-HC9C-6C3H
Version ranges need review.
github.com/moby/go-archive
DPU kit for NVIDIA/dpu-kit-for-nvidia/must-gather-rhel10
Go
Red Hat
High
Fix reported
2026-09-02
github.com/moby/buildkit: BuildKit: Denial of Service via duplicate Git source metadata resolution
CVE-2026-121522
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9
Red Hat
Medium
No fix reported
Not recorded
github.com/moby/buildkit: BuildKit: Privilege escalation via unauthorized extended file attribute modification
CVE-2026-121520
DPU kit for NVIDIA/dpu-kit-for-nvidia/bluefield-ocp-layer-rhel10
DPU kit for NVIDIA/dpu-kit-for-nvidia/must-gather-rhel10
Red Hat
High
No fix reported
Not recorded
buildkit: github.com/moby/buildkit: BuildKit: File escape vulnerability
CVE-2026-15789
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9
Red Hat
Medium
No fix reported
Not recorded
k8s.io/kubectl: Kubernetes kubectl: Arbitrary file write via path traversal on Windows
CVE-2026-19444
DPU kit for NVIDIA/dpu-kit-for-nvidia/must-gather-rhel10
Multicluster Engine for Kubernetes/multicluster-engine/registration-rhel9
Red Hat
Medium
No fix reported
Not recorded
