Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Enterprise Linux 9/mesa
Red Hat
· Package
10 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
minimatch has potential denial of service via globparts amplification
CVE-2026-118764 · GHSA-G3HV-75WG-M249
minimatch
Cost Management On Premise/costmanagement/costmanagement-ui-rhel10
npm
Red Hat
Medium
Fix reported
2026-11-04
Tokio: Race condition in `tokio::time::Interval`
CVE-2026-115567 · GHSA-5WJR-9356-4WC8
Version ranges need review.
tokio
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
Rust / Cargo
Red Hat
Medium
Fix reported
2026-10-24
brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service
CVE-2026-102277 · GHSA-Q2HR-2G5M-VWHR
brace-expansion
Cost Management On Premise/costmanagement/costmanagement-ui-rhel10
npm
Red Hat
Medium
Fix reported
2026-09-30
webpki: Name constraints were accepted for certificates asserting a wildcard name
CVE-2026-93601 · GHSA-XGP8-3HG3-C2MH
Version ranges need review.
rustls-webpki
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
Rust / Cargo
Red Hat
Low
Fix reported
2026-09-19
webpki: CRLs not considered authoritative by Distribution Point due to faulty matching logic
CVE-2026-93602 · GHSA-PWJX-QHCG-RVJ4
Version ranges need review.
rustls-webpki
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
Rust / Cargo
Red Hat
Medium
Fix reported
2026-09-19
node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)
CVE-2026-53655 · GHSA-VMF3-W455-68VH
tar
Confidential Compute Attestation/openshift-sandboxed-containers/osc-pccs
npm
Red Hat
Medium
Fix reported
2026-09-10
tar-rs `unpack_in` can chmod arbitrary directories by following symlinks
CVE-2026-33056 · GHSA-J4XF-2G29-59PH
Version ranges need review.
tar
Confidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9
Rust / Cargo
Red Hat
Medium
Fix reported
2026-09-10
openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing
CVE-2026-28390
Confidential Cluster Operator/confidential-clusters-beta/confidential-cluster-operator-bundle
Confidential Cluster Operator/redhat-user-workloads/attestation-key-register
Red Hat
Medium
No fix reported
Not recorded
openssl: openssl: AEAD forgeries possible with empty ciphertext in EVP_Cipher()
CVE-2026-75803
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9
Red Hat
Low
No fix reported
Not recorded
openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission
CVE-2026-84782
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
Confidential Compute Attestation/agent-sandbox/agent-sandbox-router
Red Hat
High
No fix reported
Not recorded
