Security
فارسی
All products

Red Hat Build of Podman Desktop - Tech Preview/rhdesktop/rh-podman-desktop-ext-rhel-rhel10

Red Hat · Package
14 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swapCVE-2026-41568 · GHSA-VP62-88P7-QQF5Version ranges need review. github.com/docker/dockergithub.com/moby/moby/v2 GoRed Hat Medium Fix reported
ws: Uninitialized memory disclosureCVE-2026-45736 · GHSA-58QX-3VCG-4XPX wsNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat Medium Fix reported
PostCSS has XSS via Unescaped </style> in its CSS Stringify OutputCVE-2026-41305 · GHSA-QX2V-QP2M-JG93 postcssCryostat 4/cryostat-openshift-console-plugin-npm npmRed Hat Medium Fix reported
BuildKit Git URL subdir component can cause access to restricted filesCVE-2026-33748 · GHSA-4VRQ-3VRQ-G6GGVersion ranges need review. github.com/moby/buildkitAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat High Fix reported
ws: Memory exhaustion DoS from tiny fragments and data chunksCVE-2026-48779 · GHSA-96HV-2XVQ-FX4P wsNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat High Fix reported
form-data: CRLF injection in form-data via unescaped multipart field names and filenamesCVE-2026-12143 · GHSA-HMW2-7CC7-3QXX form-dataNetwork Observability Operator/network-observability/network-observability-console-plugin-pf4-rhel9 npmRed Hat High Fix reported
postcss-selector-parser allows denial of service through uncontrolled AST recursionCVE-2026-9358 · GHSA-W9M9-85WC-3X92 postcss-selector-parserCryostat 4/cryostat-openshift-console-plugin-npm npmRed Hat Low Fix reported
Go JOSE Panics in JWE decryptionCVE-2026-34986 · GHSA-78H2-9FRX-2JM8Version ranges need review. github.com/go-jose/go-jose/v3github.com/go-jose/go-jose/v4 GoRed Hat High Fix reported
gRPC-Go has an authorization bypass via missing leading slash in :pathCVE-2026-33186 · GHSA-P77J-4MVH-X3M3Version ranges need review. google.golang.org/grpcAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Critical Fix reported
BuildKit's Malicious frontend can cause file escape outside of storage rootCVE-2026-33747 · GHSA-4C29-8RGM-JVJJVersion ranges need review. github.com/moby/buildkitAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat High Fix reported
sigstore legacy TUF client allows for arbitrary file writes with target cache path traversalCVE-2026-24137 · GHSA-FCV2-XGW5-PQXFVersion ranges need review. github.com/sigstore/sigstoreAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex BypassCVE-2026-22772 · GHSA-59JP-PJ84-45MRVersion ranges need review. github.com/sigstore/fulcioAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
ssh2: ssh2: Denial of Service due to inefficient regular expression complexityCVE-2025-70034 Red Hat Build of Podman Desktop - Tech Preview/rhdesktop/rh-podman-desktop-ext-bootc-rhel10Red Hat Build of Podman Desktop - Tech Preview/rhdesktop/rh-podman-desktop-ext-rhel-rhel10 Red Hat Medium No fix reported
podman-desktop: Podman Desktop: Denial of Service and Information Disclosure via unauthenticated HTTP serverCVE-2026-34045 Red Hat Build of Podman Desktop - Tech Preview/rhdesktop/rh-podman-desktop-ext-bootc-rhel10Red Hat Build of Podman Desktop - Tech Preview/rhdesktop/rh-podman-desktop-ext-openshift-local-rhel10 Red Hat High No fix reported