Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Trusted Artifact Signer/rhtas/trillian-logserver-rhel9
Red Hat
· Package
10 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap
CVE-2026-41568 · GHSA-VP62-88P7-QQF5
Version ranges need review.
github.com/docker/docker
github.com/moby/moby/v2
Go
Red Hat
Medium
Fix reported
2026-09-10
pgx: SQL Injection via placeholder confusion with dollar quoted string literals
CVE-2026-41889 · GHSA-J88V-2CHJ-QFWX
Version ranges need review.
github.com/jackc/pgx/v4
github.com/jackc/pgx/v5
Go
Red Hat
Low
Fix reported
2026-09-10
form-data uses unsafe random function in form-data for choosing boundary
CVE-2025-7783 · GHSA-FJXV-7RQG-78G4
form-data
Logging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8
npm
Red Hat
Critical
Fix reported
2026-09-10
axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL
CVE-2025-27152 · GHSA-JR5F-V2JV-69X6
axios
Cryostat 3/io.cryostat-cryostat3
npm
Red Hat
High
Fix reported
2026-09-10
filippo.io/edwards25519 MultiScalarMult produces invalid results or undefined behavior if receiver is not the identity
CVE-2026-26958 · GHSA-FW7P-63QQ-7HPR
Version ranges need review.
filippo.io/edwards25519
Cryostat 4/cryostat/cryostat-storage-rhel9
Go
Red Hat
Low
Fix reported
2026-09-10
body-parser is vulnerable to denial of service when url encoding is used
CVE-2025-13466 · GHSA-WQCH-XFXH-VRR4
body-parser
Cryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9
npm
Red Hat
Medium
Fix reported
2026-09-10
Axios is vulnerable to DoS attack through lack of data size check
CVE-2025-58754 · GHSA-4HJH-WCWX-XVWJ
axios
Migration Toolkit for Applications 8/mta/mta-ui-rhel9
npm
Red Hat
High
Fix reported
2026-09-10
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net
CVE-2025-22870 · GHSA-QXP5-GWG8-XV66
Version ranges need review.
golang.org/x/net
stdlib
Go
Red Hat
Medium
Fix reported
2026-09-10
Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations
CVE-2024-51744 · GHSA-29WX-VH33-7X7R
Version ranges need review.
github.com/golang-jwt/jwt/v4
Builds for Red Hat OpenShift/openshift-builds-triggers-container
Go
Red Hat
Low
Fix reported
2026-09-10
cookie accepts cookie name, path, and domain with out of bounds characters
CVE-2024-47764 · GHSA-PXG6-PF52-XH8X
cookie
Cryostat 3/cookie
npm
Red Hat
Low
Fix reported
2026-09-10
