Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Lightspeed Core/lightspeed-core/dataverse-exporter-rhel9
Red Hat
· Package
8 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching
CVE-2026-4539 · GHSA-5239-WWWM-4PMQ
Version ranges need review.
pygments
External Secrets Operator for Red Hat OpenShift/external-secrets-operator/bitwarden-sdk-server-rhel9
PyPI
Red Hat
Low
Fix reported
2026-09-10
Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function
CVE-2026-25645 · GHSA-GC5V-M9X4-R6X2
Version ranges need review.
requests
External Secrets Operator for Red Hat OpenShift/external-secrets-operator/bitwarden-sdk-server-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-09-10
tar-rs `unpack_in` can chmod arbitrary directories by following symlinks
CVE-2026-33056 · GHSA-J4XF-2G29-59PH
Version ranges need review.
tar
Confidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9
Rust / Cargo
Red Hat
Medium
Fix reported
2026-09-10
time vulnerable to stack exhaustion Denial of Service attack
CVE-2026-25727 · GHSA-R6V5-FH4H-64XC
Version ranges need review.
time
Confidential Compute Attestation/build-of-trustee/trustee-rhel9
Rust / Cargo
Red Hat
Medium
Fix reported
2026-09-10
pip Path Traversal vulnerability
CVE-2026-1703 · GHSA-6VGW-5PG2-W6JP
Version ranges need review.
pip
Lightspeed Core/lightspeed-core/dataverse-exporter-rhel9
PyPI
Red Hat
Low
Fix reported
2026-09-10
pyasn1 has a DoS vulnerability in decoder
CVE-2026-23490 · GHSA-63VM-454H-VHHQ
Version ranges need review.
pyasn1
Lightspeed Core/lightspeed-core/dataverse-exporter-rhel9
PyPI
Red Hat
High
Fix reported
2026-09-10
openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing
CVE-2026-28390
Confidential Cluster Operator/confidential-clusters-beta/confidential-cluster-operator-bundle
Confidential Cluster Operator/redhat-user-workloads/attestation-key-register
Red Hat
Medium
No fix reported
Not recorded
uuid: uuid: Unexpected data writes when using external output buffers with specific UUID versions
CVE-2026-41988
Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9
Confidential Cluster Operator/confidential-clusters-beta/buildroot-rhel9
Red Hat
Low
No fix reported
Not recorded
