| Tokio: Race condition in `tokio::time::Interval`CVE-2026-115567 · GHSA-5WJR-9356-4WC8Version ranges need review. |
tokioAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
Rust / CargoRed Hat |
Medium
|
Fix reported |
|
| slab allows out-of-bounds access in `get_disjoint_mut` due to incorrect bounds checkCVE-2025-55159 · GHSA-QX2V-8332-M4FVVersion ranges need review. |
slabRed Hat Enterprise Linux 10/389-ds-base |
Rust / CargoRed Hat |
Medium
|
Fix reported |
|
| brace-expansion Regular Expression Denial of Service vulnerabilityCVE-2025-5889 · GHSA-V6H2-P8H4-QCJW |
brace-expansionCryostat 4/io.cryostat-cryostat |
npmRed Hat |
Low
|
Fix reported |
|
| uuid: Missing buffer bounds check in v3/v5/v6 when buf is providedCVE-2026-41907 · GHSA-W5HQ-G745-H8PQ |
uuidConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs |
npmRed Hat |
Medium
|
Fix reported |
|
| crossbeam-channel Vulnerable to Double Free on DropCVE-2025-4574 · GHSA-PG9F-39PC-QF8GVersion ranges need review. |
crossbeam-channelRed Hat Enterprise Linux 10/389-ds-base |
Rust / CargoRed Hat |
Medium
|
Fix reported |
|
| prettier: prettier parseNestedCSS ReDoSCVE-2025-8263 |
Cryostat 4/io.cryostat-cryostatMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-console-plugin-rhel9 |
Red Hat |
Medium
|
No fix reported |
|
| 389-ds-base: 389-ds-base: partial stack address information leak via ber_printf type confusion in SSO token handlerCVE-2026-11785 |
Red Hat Directory Server 12/redhat-ds:12/389-ds-baseRed Hat Directory Server 13/389-ds-base |
Red Hat |
Medium
|
No fix reported |
|
| 389-ds-base: 389-ds-base: heap out-of-bounds read in LDIF parser str2entry_state_information_from_type()CVE-2026-11786 |
Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base |
Red Hat |
Low
|
No fix reported |
|
| 389-ds-base: 389-ds-base: heap buffer over-read in ldap_utf8prev() via str2simple filter parsingCVE-2026-11787 |
Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base |
Red Hat |
Medium
|
No fix reported |
|
| 389-ds-base: 389-ds-base: Content Sync plugin unbounded queue growth and race conditionsCVE-2026-11611 |
Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base |
Red Hat |
Medium
|
No fix reported |
|
| 389-ds-base: 389-ds-base: SMD5 password storage plugin salt length integer underflow crashCVE-2026-11789 |
Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base |
Red Hat |
Medium
|
No fix reported |
|
| 389-ds-base: 389-ds-base: PBKDF2 password storage plugin unbounded iteration count denial of serviceCVE-2026-11790 |
Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base |
Red Hat |
Medium
|
No fix reported |
|
| 389-ds-base: 389-ds-base: use-after-free in schema reload via attr_syntax_swap_ht()CVE-2026-11791 |
Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base |
Red Hat |
Medium
|
No fix reported |
|
| 389-ds-base: 389-ds-base: heap buffer overflow in audit log password masking (create_masked_entry_string)CVE-2026-11792 |
Red Hat Directory Server 12/redhat-ds:12/389-ds-baseRed Hat Directory Server 13/389-ds-base |
Red Hat |
Low
|
No fix reported |
|
| 389-ds-base: 389-ds-base: stack buffer overflow in checkPrefix() algorithm ID parsingCVE-2026-11793 |
Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base |
Red Hat |
Low
|
No fix reported |
|
| uuid: uuid: Unexpected data writes when using external output buffers with specific UUID versionsCVE-2026-41988 |
Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9Confidential Cluster Operator/confidential-clusters-beta/buildroot-rhel9 |
Red Hat |
Low
|
No fix reported |
|
| 389-ds-base: 389-ds-base: heap-buffer-overflows in __aclp__normalize_acltxt()CVE-2026-12528 |
Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base |
Red Hat |
Low
|
No fix reported |
|
| 389-ds-base: 389-ds-base: heap buffer overflow in schema objectclass serialization due to missing oc_superior in size calculationCVE-2026-11884 |
Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base |
Red Hat |
Medium
|
No fix reported |
|
| 389-ds-base: 389-ds-base: heap-buffer-overflow in DN normalization via quoted multivalued RDNCVE-2026-14940 |
Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base |
Red Hat |
Medium
|
No fix reported |
|
| 389-ds-base: 389-ds-base: Static initialization vector in AES-CBC/3DES-CBC attribute encryptionCVE-2026-14969 |
Red Hat Directory Server 11/redhat-ds:11/389-ds-baseRed Hat Directory Server 12/redhat-ds:12/389-ds-base |
Red Hat |
Medium
|
No fix reported |
|
