Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
OpenShift Pipelines/openshift-pipelines/pipelines-webhook-rhel8
Red Hat
· Package
15 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion
CVE-2026-54462 · GHSA-2HW4-C9M4-F2FJ
Version ranges need review.
knative.dev/pkg
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel10
Go
Red Hat
Medium
Fix reported
2026-11-06
urllib3 streaming API improperly handles highly compressed data
CVE-2025-66471 · GHSA-2XPW-W6GG-JR37
Version ranges need review.
urllib3
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-shared-resource-webhook-rhel9
PyPI
Red Hat
High
Fix reported
2026-09-25
go-git improperly verifies data integrity values for .idx and .pack files
CVE-2026-25934 · GHSA-37CX-329C-33X3
Version ranges need review.
github.com/go-git/go-git/v4
github.com/go-git/go-git/v5
Go
Red Hat
Medium
Fix reported
2026-09-10
containerd CRI server: Host memory exhaustion through Attach goroutine leak
CVE-2025-64329 · GHSA-M6HQ-P25P-FFR2
Version ranges need review.
github.com/containerd/containerd/v2
github.com/containerd/containerd
Go
Red Hat
Medium
Fix reported
2026-09-10
containerd affected by a local privilege escalation via wide permissions on CRI directory
CVE-2024-25621 · GHSA-PWHC-RPQ9-4C8W
Version ranges need review.
github.com/containerd/containerd/v2
github.com/containerd/containerd
Go
Red Hat
High
Fix reported
2026-09-10
urllib3 allows an unbounded number of links in the decompression chain
CVE-2025-66418 · GHSA-GM62-XV2J-4W53
Version ranges need review.
urllib3
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
PyPI
Red Hat
High
Fix reported
2026-09-10
Tekton Pipelines: HTTP Resolver Unbounded Response Body Read Enables Denial of Service via Memory Exhaustion
CVE-2026-40924 · GHSA-M2CX-GPQF-QF74
Version ranges need review.
github.com/tektoncd/pipeline
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
gRPC-Go has an authorization bypass via missing leading slash in :path
CVE-2026-33186 · GHSA-P77J-4MVH-X3M3
Version ranges need review.
google.golang.org/grpc
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Critical
Fix reported
2026-09-10
Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun
CVE-2026-33022 · GHSA-CV4X-93XX-WGFJ
Version ranges need review.
github.com/tektoncd/pipeline
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
sigstore legacy TUF client allows for arbitrary file writes with target cache path traversal
CVE-2026-24137 · GHSA-FCV2-XGW5-PQXF
Version ranges need review.
github.com/sigstore/sigstore
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)
CVE-2026-21441 · GHSA-38JV-5279-WG99
Version ranges need review.
urllib3
External Secrets Operator for Red Hat OpenShift/external-secrets-operator/bitwarden-sdk-server-rhel9
PyPI
Red Hat
High
Fix reported
2026-09-10
urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation
CVE-2025-50181 · GHSA-PQ67-6M6Q-MJ2V
Version ranges need review.
urllib3
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-09-10
CIRCL-Fourq: Missing and wrong validation can lead to incorrect results
CVE-2025-8556 · GHSA-2X5J-VHC8-9CWM
Version ranges need review.
github.com/cloudflare/circl
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9
Go
Red Hat
Low
Fix reported
2026-09-10
urllib3 does not control redirects in browsers and Node.js
CVE-2025-50182 · GHSA-48P4-8XCF-VXJ5
Version ranges need review.
urllib3
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-09-10
setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write
CVE-2025-47273 · GHSA-5RJG-FVGR-3XXF
Version ranges need review.
setuptools
Confidential Compute Attestation/confidential-compute-attestation-tech-preview/trustee-rhel9
PyPI
Red Hat
High
Fix reported
2026-05-11
