Security
فارسی
All products

Zero Trust Workload Identity Manager - Tech Preview/redhat-user-workloads/spiffe-spire-agent-1-12-4

Red Hat · Package
7 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Cosign's verify-blob-attestation reports false positive when payload parsing failsCVE-2026-39395 · GHSA-W6C6-C85G-MMV6Version ranges need review. github.com/sigstore/cosign/v2github.com/sigstore/cosign/v3 GoRed Hat Medium Fix reported
JsBraceDepth Context Tracking Bugs (XSS) in html/templateCVE-2026-32289 · GO-2026-4865 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/redhat-user-workloads/appliance GoRed Hat Medium Fix reported
Unbounded allocation for old GNU sparse in archive/tarCVE-2026-32288 · GO-2026-4869 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/redhat-user-workloads/assisted-installer-ds-main GoRed Hat Medium Fix reported
Inefficient policy validation in crypto/x509CVE-2026-32281 · GO-2026-4946 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/redhat-user-workloads/appliance GoRed Hat Medium Fix reported
TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unixCVE-2026-32282 · GO-2026-4864 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/redhat-user-workloads/appliance GoRed Hat Medium Fix reported
pgx contains memory-safety vulnerabilityCVE-2026-33815 · GHSA-XGRM-4FWX-7QM8Version ranges need review. github.com/jackc/pgx/v5Multicluster Engine for Kubernetes/multicluster-engine/assisted-service-9-rhel9 GoRed Hat Critical Fix reported
Memory-safety vulnerability in github.com/jackc/pgx/v5.CVE-2026-33816 · GHSA-9JJ7-4M8R-RFCMVersion ranges need review. github.com/jackc/pgx/v5Custom Metric Autoscaler operator for Red Hat Openshift/redhat-user-workloads/keda-operator GoRed Hat Critical Fix reported