Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Quay 3/redhat-user-workloads/quay-quay-v3-9
Red Hat
· Package
10 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs
CVE-2026-39892 · GHSA-P423-J2CM-9VMQ
Version ranges need review.
cryptography
Lightspeed Core/openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-11-04
JsBraceDepth Context Tracking Bugs (XSS) in html/template
CVE-2026-32289 · GO-2026-4865
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/redhat-user-workloads/appliance
Go
Red Hat
Medium
Fix reported
2026-10-07
Unbounded allocation for old GNU sparse in archive/tar
CVE-2026-32288 · GO-2026-4869
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/redhat-user-workloads/assisted-installer-ds-main
Go
Red Hat
Medium
Fix reported
2026-10-07
Inefficient policy validation in crypto/x509
CVE-2026-32281 · GO-2026-4946
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/redhat-user-workloads/appliance
Go
Red Hat
Medium
Fix reported
2026-10-03
TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix
CVE-2026-32282 · GO-2026-4864
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/redhat-user-workloads/appliance
Go
Red Hat
Medium
Fix reported
2026-09-29
webpki: Name constraints were accepted for certificates asserting a wildcard name
CVE-2026-93601 · GHSA-XGP8-3HG3-C2MH
Version ranges need review.
rustls-webpki
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
Rust / Cargo
Red Hat
Low
Fix reported
2026-09-19
webpki: CRLs not considered authoritative by Distribution Point due to faulty matching logic
CVE-2026-93602 · GHSA-PWJX-QHCG-RVJ4
Version ranges need review.
rustls-webpki
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
Rust / Cargo
Red Hat
Medium
Fix reported
2026-09-19
Axios HTTP/2 Session Cleanup State Corruption Vulnerability
CVE-2026-39865 · GHSA-QJ83-CQ47-W5F8
axios
Cryostat 4/axios
npm
Red Hat
Medium
Fix reported
2026-09-10
Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF
CVE-2025-62718 · GHSA-3P68-RC4W-QGX5
axios
Gatekeeper 3/redhat-user-workloads/gatekeeper-3-18
npm
Red Hat
Medium
Fix reported
2026-09-10
openssl: openssl: AEAD forgeries possible with empty ciphertext in EVP_Cipher()
CVE-2026-75803
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9
Red Hat
Low
No fix reported
Not recorded
