Red Hat Trusted Artifact Signer/rhtas/createtree-rhel9

Red Hat · Package

8 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swapCVE-2026-41568 · GHSA-VP62-88P7-QQF5Version ranges need review.	github.com/docker/docker github.com/moby/moby/v2	GoRed Hat	Medium	Fix reported	2026-09-10
pgx: SQL Injection via placeholder confusion with dollar quoted string literalsCVE-2026-41889 · GHSA-J88V-2CHJ-QFWXVersion ranges need review.	github.com/jackc/pgx/v4 github.com/jackc/pgx/v5	GoRed Hat	Low	Fix reported	2026-09-10
form-data uses unsafe random function in form-data for choosing boundaryCVE-2025-7783 · GHSA-FJXV-7RQG-78G4	form-data Logging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8	npmRed Hat	Critical	Fix reported	2026-09-10
filippo.io/edwards25519 MultiScalarMult produces invalid results or undefined behavior if receiver is not the identityCVE-2026-26958 · GHSA-FW7P-63QQ-7HPRVersion ranges need review.	filippo.io/edwards25519 Cryostat 4/cryostat/cryostat-storage-rhel9	GoRed Hat	Low	Fix reported	2026-09-10
body-parser is vulnerable to denial of service when url encoding is usedCVE-2025-13466 · GHSA-WQCH-XFXH-VRR4	body-parser Cryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9	npmRed Hat	Medium	Fix reported	2026-09-10
Axios is vulnerable to DoS attack through lack of data size checkCVE-2025-58754 · GHSA-4HJH-WCWX-XVWJ	axios Migration Toolkit for Applications 8/mta/mta-ui-rhel9	npmRed Hat	High	Fix reported	2026-09-10
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/netCVE-2025-22870 · GHSA-QXP5-GWG8-XV66Version ranges need review.	golang.org/x/net stdlib	GoRed Hat	Medium	Fix reported	2026-09-10
Usage of ExtKeyUsageAny disables policy validation in crypto/x509CVE-2025-22874 · GO-2025-3749	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	GoRed Hat	High	Fix reported	2026-08-27