| Tracing logging user input may result in poisoning logs with ANSI escape sequencesCVE-2025-58160 · GHSA-XWFJ-JGWM-7WP5Version ranges need review. |
tracing-subscriberConfidential Compute Attestation/build-of-trustee/trustee-rhel9 |
Rust / CargoRed Hat |
Low
|
Fix reported |
|
| containerd CRI server: Host memory exhaustion through Attach goroutine leakCVE-2025-64329 · GHSA-M6HQ-P25P-FFR2Version ranges need review. |
github.com/containerd/containerd/v2github.com/containerd/containerd |
GoRed Hat |
Medium
|
Fix reported |
|
| tar-rs `unpack_in` can chmod arbitrary directories by following symlinksCVE-2026-33056 · GHSA-J4XF-2G29-59PHVersion ranges need review. |
tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9 |
Rust / CargoRed Hat |
Medium
|
Fix reported |
|
| CRL Distribution Point Scope Check Logic Error in AWS-LCCVE-2026-4428 · GHSA-9F94-5G5W-GF6RVersion ranges need review. |
aws-lc-fips-sysaws-lc-sys |
Rust / CargoRed Hat |
High
|
Fix reported |
|
| AWS-LC has Timing Side-Channel in AES-CCM Tag VerificationCVE-2026-3337 · GHSA-65P9-R9H6-22VJVersion ranges need review. |
aws-lc-fips-sysaws-lc-sys |
Rust / CargoRed Hat |
High
|
Fix reported |
|
| astral-tokio-tar insufficiently validates PAX extensions during extractionCVE-2026-32766 · GHSA-6GX3-4362-RF54Version ranges need review. |
astral-tokio-tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9 |
Rust / CargoRed Hat |
Medium
|
Fix reported |
|
| time vulnerable to stack exhaustion Denial of Service attackCVE-2026-25727 · GHSA-R6V5-FH4H-64XCVersion ranges need review. |
timeConfidential Compute Attestation/build-of-trustee/trustee-rhel9 |
Rust / CargoRed Hat |
Medium
|
Fix reported |
|
| rsa crate has potential panic on a prime being equal to 1CVE-2026-21895 · GHSA-9C48-W39G-HM26 |
rsaConfidential Compute Attestation/build-of-trustee/trustee-rhel9 |
Rust / CargoRed Hat |
Low
|
Fix reported |
|
| Sequoia PGP has Subtraction Overflow when aes_key_unwrap function is provided ciphertext that is too shortCVE-2025-67897 · GHSA-V6X3-9R38-R27QVersion ranges need review. |
sequoia-openpgpConfidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9 |
Rust / CargoRed Hat |
Medium
|
Fix reported |
|
| Logrus is vulnerable to DoS when using Entry.Writer()CVE-2025-65637 · GHSA-4F99-4Q7P-P3GHVersion ranges need review. |
github.com/sirupsen/logrusConfidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9 |
GoRed Hat |
High
|
Fix reported |
|
| github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archivesCVE-2025-58058 · GHSA-JC7W-C686-C4V9Version ranges need review. |
github.com/ulikunitz/xzAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9 |
GoRed Hat |
Medium
|
Fix reported |
|
| astral-tokio-tar has a path traversal in tar extractionCVE-2025-59825 · GHSA-3WGQ-WRWC-VQMV |
astral-tokio-tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-cloud-api-adaptor-rhel9 |
Rust / CargoRed Hat |
Medium
|
Fix reported |
|
| curl: libssh key passphrase bypass without agent setCVE-2025-15224 |
Confidential Compute Attestation/build-of-trustee/trustee-rhel9Confidential Compute Attestation/confidential-compute-attestation-tech-preview/trustee-rhel9 |
Red Hat |
Low
|
No fix reported |
|
| curl: Host verification bypass during SSH transfersCVE-2025-15079 |
Confidential Compute Attestation/build-of-trustee/trustee-rhel9Confidential Compute Attestation/confidential-compute-attestation-tech-preview/trustee-rhel9 |
Red Hat |
Low
|
No fix reported |
|
| curl: libcurl: Improper certificate validation due to cached TLS settings reuseCVE-2025-14819 |
Confidential Compute Attestation/build-of-trustee/trustee-rhel9Confidential Compute Attestation/confidential-compute-attestation-tech-preview/trustee-rhel9 |
Red Hat |
Low
|
No fix reported |
|
| curl: Information disclosure via cross-protocol redirect with OAuth2 bearer tokenCVE-2025-14524 |
Confidential Compute Attestation/build-of-trustee/trustee-rhel9Confidential Compute Attestation/confidential-compute-attestation-tech-preview/trustee-rhel9 |
Red Hat |
Low
|
No fix reported |
|
| curl: Public key pinning bypass via QUIC and GnuTLS allows server impersonationCVE-2025-13034 |
Confidential Compute Attestation/build-of-trustee/trustee-rhel9Confidential Compute Attestation/confidential-compute-attestation-tech-preview/trustee-rhel9 |
Red Hat |
Medium
|
No fix reported |
|
| curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfersCVE-2025-14017 |
Confidential Compute Attestation/build-of-trustee/trustee-rhel9Confidential Compute Attestation/confidential-compute-attestation-tech-preview/trustee-rhel9 |
Red Hat |
Medium
|
No fix reported |
|
| curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authenticationCVE-2026-1965 |
Confidential Compute Attestation/build-of-trustee/trustee-rhel9Confidential Compute Attestation/confidential-compute-attestation-tech-preview/trustee-rhel9 |
Red Hat |
Medium
|
No fix reported |
|
| curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirectCVE-2026-3783 |
Confidential Compute Attestation/build-of-trustee/trustee-rhel9Confidential Compute Attestation/confidential-compute-attestation-tech-preview/trustee-rhel9 |
Red Hat |
Medium
|
No fix reported |
|
