Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Enterprise Linux 9/cockpit
Red Hat
· Package
6 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Lodash has Prototype Pollution Vulnerability in `_.unset`, `_.omit`, and `_.pullAt` functions
CVE-2025-13465 · GHSA-XXJR-MMJV-4GPG
lodash-amd
lodash-es
npm
Red Hat
Medium
Fix reported
2026-11-04
uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided
CVE-2026-41907 · GHSA-W5HQ-G745-H8PQ
uuid
Confidential Compute Attestation/openshift-sandboxed-containers/osc-pccs
npm
Red Hat
Medium
Fix reported
2026-05-21
cockpit: cockpit-storaged: Tang keyserver address from an untrusted LUKS header clevis token reaches curl's argument vector as an option
CVE-2026-125672
Red Hat Enterprise Linux 10/cockpit
Red Hat Enterprise Linux 6/cockpit
Red Hat
Medium
No fix reported
Not recorded
uuid: uuid: Unexpected data writes when using external output buffers with specific UUID versions
CVE-2026-41988
Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9
Confidential Cluster Operator/confidential-clusters-beta/buildroot-rhel9
Red Hat
Low
No fix reported
Not recorded
cockpit: Cockpit CMS: Arbitrary file read and code execution via path traversal
CVE-2026-58467
Red Hat Enterprise Linux 10/cockpit
Red Hat Enterprise Linux 7/cockpit
Red Hat
High
No fix reported
Not recorded
cockpit: Cockpit: Unauthorized modification of login records via integer overflow
CVE-2026-91142
Red Hat Enterprise Linux 10/cockpit
Red Hat Enterprise Linux 7/cockpit
Red Hat
Low
No fix reported
Not recorded
