Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Satellite 6/python3.12-maturin
Red Hat
· Package
12 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
rustls-webpki: Denial of service via panic on malformed CRL BIT STRING
CVE-2026-93599 · GHSA-82J2-J2CH-GFR8
Version ranges need review.
rustls-webpki
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
Rust / Cargo
Red Hat
High
Fix reported
2026-09-19
webpki: Name constraints were accepted for certificates asserting a wildcard name
CVE-2026-93601 · GHSA-XGP8-3HG3-C2MH
Version ranges need review.
rustls-webpki
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
Rust / Cargo
Red Hat
Low
Fix reported
2026-09-19
webpki: CRLs not considered authoritative by Distribution Point due to faulty matching logic
CVE-2026-93602 · GHSA-PWJX-QHCG-RVJ4
Version ranges need review.
rustls-webpki
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
Rust / Cargo
Red Hat
Medium
Fix reported
2026-09-19
node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)
CVE-2026-53655 · GHSA-VMF3-W455-68VH
tar
Confidential Compute Attestation/openshift-sandboxed-containers/osc-pccs
npm
Red Hat
Medium
Fix reported
2026-09-10
tar-rs `unpack_in` can chmod arbitrary directories by following symlinks
CVE-2026-33056 · GHSA-J4XF-2G29-59PH
Version ranges need review.
tar
Confidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9
Rust / Cargo
Red Hat
Medium
Fix reported
2026-09-10
time vulnerable to stack exhaustion Denial of Service attack
CVE-2026-25727 · GHSA-R6V5-FH4H-64XC
Version ranges need review.
time
Confidential Compute Attestation/build-of-trustee/trustee-rhel9
Rust / Cargo
Red Hat
Medium
Fix reported
2026-09-10
`idna` accepts Punycode labels that do not produce any non-ASCII when decoded
CVE-2024-12224 · GHSA-H97M-WW89-6JMQ
Version ranges need review.
idna
OpenShift Serverless/openshift-serverless-1/kn-plugin-func-func-util-rhel8
Rust / Cargo
Red Hat
Medium
Fix reported
2026-09-10
Some AES functions may panic when overflow checking is enabled in ring
CVE-2025-4432 · GHSA-4P46-PWFR-66X6
ring
Red Hat Enterprise Linux 10/firefox
Rust / Cargo
Red Hat
Medium
Fix reported
2025-12-30
crossbeam-channel Vulnerable to Double Free on Drop
CVE-2025-4574 · GHSA-PG9F-39PC-QF8G
Version ranges need review.
crossbeam-channel
Red Hat Enterprise Linux 10/389-ds-base
Rust / Cargo
Red Hat
Medium
Fix reported
2025-10-28
uuid: uuid: Unexpected data writes when using external output buffers with specific UUID versions
CVE-2026-41988
Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9
Confidential Cluster Operator/confidential-clusters-beta/buildroot-rhel9
Red Hat
Low
No fix reported
Not recorded
bzip2: bzip2: Denial of Service in bzip2recover via a specially crafted file
CVE-2026-42250
Confidential Compute Attestation/openshift-sandboxed-containers/osc-podvm-payload-rhel9
OpenShift Lightspeed/openshift-lightspeed/lightspeed-to-dataverse-exporter-rhel9
Red Hat
Medium
No fix reported
Not recorded
tar: tar-rs: Information Disclosure via Symlink Escape
CVE-2026-70622
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
OpenShift Lightspeed/openshift-lightspeed/lightspeed-to-dataverse-exporter-rhel9
Red Hat
Medium
No fix reported
Not recorded
