Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Build of Podman Desktop - Tech Preview/rhdesktop/rh-podman-desktop-ext-sandbox-rhel10
Red Hat
· Package
9 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
ws: Uninitialized memory disclosure
CVE-2026-45736 · GHSA-58QX-3VCG-4XPX
ws
Node HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9
npm
Red Hat
Medium
Fix reported
2026-09-10
PostCSS has XSS via Unescaped </style> in its CSS Stringify Output
CVE-2026-41305 · GHSA-QX2V-QP2M-JG93
postcss
Cryostat 4/cryostat-openshift-console-plugin-npm
npm
Red Hat
Medium
Fix reported
2026-09-10
brace-expansion: Zero-step sequence causes process hang and memory exhaustion
CVE-2026-33750 · GHSA-F886-M6HF-6M8V
brace-expansion
Cryostat 4/brace-expansion
npm
Red Hat
Medium
Fix reported
2026-09-10
ws: Memory exhaustion DoS from tiny fragments and data chunks
CVE-2026-48779 · GHSA-96HV-2XVQ-FX4P
ws
Node HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9
npm
Red Hat
High
Fix reported
2026-09-10
form-data: CRLF injection in form-data via unescaped multipart field names and filenames
CVE-2026-12143 · GHSA-HMW2-7CC7-3QXX
form-data
Network Observability Operator/network-observability/network-observability-console-plugin-pf4-rhel9
npm
Red Hat
High
Fix reported
2026-09-10
postcss-selector-parser allows denial of service through uncontrolled AST recursion
CVE-2026-9358 · GHSA-W9M9-85WC-3X92
postcss-selector-parser
Cryostat 4/cryostat-openshift-console-plugin-npm
npm
Red Hat
Low
Fix reported
2026-09-10
ip-address has XSS in Address6 HTML-emitting methods
CVE-2026-42338 · GHSA-V2V4-37R5-5V8G
ip-address
Confidential Compute Attestation/openshift-sandboxed-containers/osc-pccs
npm
Red Hat
Medium
Fix reported
2026-09-10
Rollup 4 has Arbitrary File Write via Path Traversal
CVE-2026-27606 · GHSA-MW96-CPMX-2VGC
rollup
OpenShift Pipelines/openshift-pipelines/pipelines-hub-api-rhel8
npm
Red Hat
High
Fix reported
2026-09-10
podman-desktop: Podman Desktop: Denial of Service and Information Disclosure via unauthenticated HTTP server
CVE-2026-34045
Red Hat Build of Podman Desktop - Tech Preview/rhdesktop/rh-podman-desktop-ext-bootc-rhel10
Red Hat Build of Podman Desktop - Tech Preview/rhdesktop/rh-podman-desktop-ext-openshift-local-rhel10
Red Hat
High
No fix reported
Not recorded