Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Trusted Application Pipeline/rhtap-cli/rhtap-cli-rhel9
Red Hat
· Package
9 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives
CVE-2025-58058 · GHSA-JC7W-C686-C4V9
Version ranges need review.
github.com/ulikunitz/xz
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
containerd has an integer overflow in User ID handling
CVE-2024-40635 · GHSA-265R-HFXG-FHMG
Version ranges need review.
github.com/containerd/containerd/v2
github.com/containerd/containerd
Go
Red Hat
Medium
Fix reported
2026-09-10
Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow
CVE-2025-32387 · GHSA-5XQW-8HWV-WG92
Version ranges need review.
helm.sh/helm/v3
Deployment Validation Operator/deployment-validation-operator-container
Go
Red Hat
Medium
Fix reported
2026-02-04
Helm vulnerable to Code Injection through malicious chart.yaml content
CVE-2025-53547 · GHSA-557J-XG8C-Q2MM
Version ranges need review.
helm.sh/helm/v3
Deployment Validation Operator/dvo/deployment-validation-operator-bundle
Go
Red Hat
High
Fix reported
2026-02-04
Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination
CVE-2025-32386 · GHSA-4HFP-H4CW-HJ8P
Version ranges need review.
helm.sh/helm/v3
Deployment Validation Operator/deployment-validation-operator-container
Go
Red Hat
Medium
Fix reported
2026-02-04
Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion
CVE-2025-55199 · GHSA-9H84-QMV7-982P
Version ranges need review.
helm.sh/helm/v3
helm.sh/helm
Go
Red Hat
Medium
Fix reported
2026-02-04
Distribution's token authentication allows to inject an untrusted signing key in a JWT
CVE-2025-24976 · GHSA-PHW4-MC57-4HWC
github.com/distribution/distribution/v3
github.com/distribution/distribution
Go
Red Hat
High
Fix reported
2026-02-04
Helm May Panic Due To Incorrect YAML Content
CVE-2025-55198 · GHSA-F9F8-9PMF-XV68
Version ranges need review.
helm.sh/helm/v3
helm.sh/helm
Go
Red Hat
Medium
Fix reported
2026-02-04
jq: assertion failure in run_jq_tests() of the file jq_test.c
CVE-2025-9403
Red Hat Ansible Automation Platform 2/automation-controller
Red Hat Ceph Storage 4/jq
Red Hat
Low
No fix reported
Not recorded
