Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
OpenShift Pipelines/openshift-pipelines/pipelines-operator-bundle
Red Hat
· Package
11 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL
CVE-2026-24117 · GHSA-4C4X-JM2X-PF9J
Version ranges need review.
github.com/sigstore/rekor
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
filippo.io/edwards25519 MultiScalarMult produces invalid results or undefined behavior if receiver is not the identity
CVE-2026-26958 · GHSA-FW7P-63QQ-7HPR
Version ranges need review.
filippo.io/edwards25519
Cryostat 4/cryostat/cryostat-storage-rhel9
Go
Red Hat
Low
Fix reported
2026-09-10
chi has an open redirect vulnerability in the RedirectSlashes middleware
CVE-2025-69725 · GHSA-MQQF-5WVP-8FH8
Version ranges need review.
github.com/go-chi/chi/v2
github.com/go-chi/chi/v3
Go
Red Hat
Medium
Fix reported
2026-09-10
go-tuf improperly validates the configured threshold for delegations
CVE-2026-23992 · GHSA-FPHV-W9FQ-2525
Version ranges need review.
github.com/theupdateframework/go-tuf/v2
OpenShift Pipelines/openshift-pipelines/pipelines-chains-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
sigstore legacy TUF client allows for arbitrary file writes with target cache path traversal
CVE-2026-24137 · GHSA-FCV2-XGW5-PQXF
Version ranges need review.
github.com/sigstore/sigstore
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message
CVE-2026-23831 · GHSA-273P-M2CW-6833
Version ranges need review.
github.com/sigstore/rekor
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
go-tuf affected by client DoS via malformed server response
CVE-2026-23991 · GHSA-846P-JG2W-W324
Version ranges need review.
github.com/theupdateframework/go-tuf/v2
OpenShift Pipelines/openshift-pipelines/pipelines-chains-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
Sigstore Timestamp Authority allocates excessive memory during request parsing
CVE-2025-66564 · GHSA-4QG8-FJ49-PXJH
Version ranges need review.
github.com/sigstore/timestamp-authority/v2
github.com/sigstore/timestamp-authority
Go
Red Hat
High
Fix reported
2026-09-10
CIRCL-Fourq: Missing and wrong validation can lead to incorrect results
CVE-2025-8556 · GHSA-2X5J-VHC8-9CWM
Version ranges need review.
github.com/cloudflare/circl
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9
Go
Red Hat
Low
Fix reported
2026-09-10
Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass
CVE-2026-22772 · GHSA-59JP-PJ84-45MR
Version ranges need review.
github.com/sigstore/fulcio
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
Cosign verification accepts any valid Rekor entry under certain conditions
CVE-2026-22703 · GHSA-WHQX-F9J3-CH6M
Version ranges need review.
github.com/sigstore/cosign/v2
github.com/sigstore/cosign/v3
Go
Red Hat
Medium
Fix reported
2026-08-24
