OpenShift Serverless/openshift-serverless-1/kn-eventing-istio-controller-rhel8

Red Hat · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Requests vulnerable to .netrc credentials leak via malicious URLsCVE-2024-47081 · GHSA-9HJG-9R4M-MVJ7Version ranges need review.	requests Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	PyPIRed Hat	Medium	Fix reported	2026-10-19
QOS.CH logback-core is vulnerable to Arbitrary Code Execution through file processingCVE-2025-11226 · GHSA-25QH-J22F-PWP8	ch.qos.logback:logback-core Logging Subsystem for Red Hat OpenShift/logback-core	MavenRed Hat	Medium	Fix reported	2026-09-10
Jackson-core Vulnerable to Memory Disclosure via Source Snippet in JsonLocationCVE-2025-49128 · GHSA-WF8F-6423-GFXG	com.fasterxml.jackson.core:jackson-core Cryostat 4/jackson-core	MavenRed Hat	Medium	Fix reported	2026-09-10
urllib3 redirects are not disabled when retries are disabled on PoolManager instantiationCVE-2025-50181 · GHSA-PQ67-6M6Q-MJ2VVersion ranges need review.	urllib3 Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	PyPIRed Hat	Medium	Fix reported	2026-09-10
Quarkus potentially leaks data when duplicating a duplicated contextCVE-2025-49574 · GHSA-9623-MJ7J-P9V4	io.quarkus:quarkus-vertx Cryostat 4/quarkus-vertx	MavenRed Hat	Medium	Fix reported	2026-09-10
urllib3 does not control redirects in browsers and Node.jsCVE-2025-50182 · GHSA-48P4-8XCF-VXJ5Version ranges need review.	urllib3 Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	PyPIRed Hat	Medium	Fix reported	2026-09-10
Jinja2 vulnerable to sandbox breakout through attr filter selecting format methodCVE-2025-27516 · GHSA-CPWX-VRP4-4PQ7Version ranges need review.	jinja2 OpenShift Serverless/openshift-serverless-1/kn-eventing-istio-controller-rhel8	PyPIRed Hat	Medium	Fix reported	2026-09-10