Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
OpenShift Pipelines/openshift-pipelines/pipelines-nop-rhel8
Red Hat
· Package
10 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
go-git improperly verifies data integrity values for .idx and .pack files
CVE-2026-25934 · GHSA-37CX-329C-33X3
Version ranges need review.
github.com/go-git/go-git/v4
github.com/go-git/go-git/v5
Go
Red Hat
Medium
Fix reported
2026-09-10
containerd CRI server: Host memory exhaustion through Attach goroutine leak
CVE-2025-64329 · GHSA-M6HQ-P25P-FFR2
Version ranges need review.
github.com/containerd/containerd/v2
github.com/containerd/containerd
Go
Red Hat
Medium
Fix reported
2026-09-10
containerd affected by a local privilege escalation via wide permissions on CRI directory
CVE-2024-25621 · GHSA-PWHC-RPQ9-4C8W
Version ranges need review.
github.com/containerd/containerd/v2
github.com/containerd/containerd
Go
Red Hat
High
Fix reported
2026-09-10
Tekton Pipelines: HTTP Resolver Unbounded Response Body Read Enables Denial of Service via Memory Exhaustion
CVE-2026-40924 · GHSA-M2CX-GPQF-QF74
Version ranges need review.
github.com/tektoncd/pipeline
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun
CVE-2026-33022 · GHSA-CV4X-93XX-WGFJ
Version ranges need review.
github.com/tektoncd/pipeline
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
sigstore legacy TUF client allows for arbitrary file writes with target cache path traversal
CVE-2026-24137 · GHSA-FCV2-XGW5-PQXF
Version ranges need review.
github.com/sigstore/sigstore
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation
CVE-2025-50181 · GHSA-PQ67-6M6Q-MJ2V
Version ranges need review.
urllib3
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-09-10
CIRCL-Fourq: Missing and wrong validation can lead to incorrect results
CVE-2025-8556 · GHSA-2X5J-VHC8-9CWM
Version ranges need review.
github.com/cloudflare/circl
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9
Go
Red Hat
Low
Fix reported
2026-09-10
urllib3 does not control redirects in browsers and Node.js
CVE-2025-50182 · GHSA-48P4-8XCF-VXJ5
Version ranges need review.
urllib3
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-09-10
setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write
CVE-2025-47273 · GHSA-5RJG-FVGR-3XXF
Version ranges need review.
setuptools
Confidential Compute Attestation/confidential-compute-attestation-tech-preview/trustee-rhel9
PyPI
Red Hat
High
Fix reported
2026-05-11
