| Podman: WORKDIR symlink traversal vulnerabilityCVE-2026-55686 · GHSA-Q6R4-3WMG-FWCQVersion ranges need review. |
github.com/containers/podman/v2github.com/containers/podman/v3 |
GoRed Hat |
Medium
|
Fix reported |
|
| Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli packageCVE-2026-111497 · GHSA-9V8H-QQGM-4M35Version ranges need review. |
brotlibrotlicffi |
PyPIRed Hat |
Critical
|
Fix reported |
|
| Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotationCVE-2026-94603 · GHSA-2CVF-WQM6-WR9GVersion ranges need review. |
github.com/containers/podman/v2github.com/containers/podman/v3 |
GoRed Hat |
Critical
|
Fix reported |
|
| Requests vulnerable to .netrc credentials leak via malicious URLsCVE-2024-47081 · GHSA-9HJG-9R4M-MVJ7Version ranges need review. |
requestsAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Podman: Malformed Image can trick podman run into leaking host environment variables into the containerCVE-2026-57231 · GHSA-4HQ8-GPF5-8P68Version ranges need review. |
github.com/containers/libpodgithub.com/containers/podman/v2 |
GoRed Hat |
High
|
Fix reported |
|
| pip would incorrectly handle doubly-encoded package URLs from indexesCVE-2026-13346 · GHSA-QWM4-QH6W-59XRVersion ranges need review. |
pipRed Hat Enterprise Linux 10/python-pip |
PyPIRed Hat |
Medium
|
Fix reported |
|
| node-tar: Process crash via PAX numeric path type confusionCVE-2026-59871 · GHSA-W8WR-V893-VJVP |
tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs |
npmRed Hat |
Medium
|
Fix reported |
|
| pip: Path traversal in console_scripts/gui_scripts entry point names allows installing scripts outside of target directoryCVE-2026-8643 · GHSA-WF93-45JW-7689Version ranges need review. |
pipExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)CVE-2026-53655 · GHSA-VMF3-W455-68VH |
tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs |
npmRed Hat |
Medium
|
Fix reported |
|
| node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath recordsCVE-2026-59875 · GHSA-GVWX-54WH-QM9J |
tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs |
npmRed Hat |
Medium
|
Fix reported |
|
| tar-rs `unpack_in` can chmod arbitrary directories by following symlinksCVE-2026-33056 · GHSA-J4XF-2G29-59PHVersion ranges need review. |
tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9 |
Rust / CargoRed Hat |
Medium
|
Fix reported |
|
| node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path TraversalCVE-2026-24842 · GHSA-34X7-HFP2-RC4V |
tarLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-operator-bundle |
npmRed Hat |
High
|
Fix reported |
|
| node-tar has a race condition leading to uninitialized memory exposureCVE-2025-64118 · GHSA-29XP-372Q-XQPH |
tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs |
npmRed Hat |
Medium
|
Fix reported |
|
| Podman Improper Certificate Validation; machine missing TLS verificationCVE-2025-6032 · GHSA-65GG-3W2W-HR4HVersion ranges need review. |
github.com/containers/podman/v2github.com/containers/podman/v3 |
GoRed Hat |
High
|
Fix reported |
|
| runc can be confused to create empty files/directories on the hostCVE-2024-45310 · GHSA-JFVP-7X6P-H2PVVersion ranges need review. |
github.com/opencontainers/runcRed Hat Enterprise Linux 7/runc |
GoRed Hat |
Medium
|
Fix reported |
|
| Netavark Has Possible DNS Resolve Confusion CVE-2025-8283 · GHSA-RPCF-RMH6-42XR |
netavarkRed Hat Enterprise Linux 10/netavark |
Rust / CargoRed Hat |
Low
|
Fix reported |
|
| setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File WriteCVE-2025-47273 · GHSA-5RJG-FVGR-3XXFVersion ranges need review. |
setuptoolsConfidential Compute Attestation/confidential-compute-attestation-tech-preview/trustee-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
| CRI-O has Potential High Memory Consumption from File ReadCVE-2025-4437 · GHSA-8F93-J3FX-72F3Version ranges need review. |
github.com/cri-o/cri-oRed Hat OpenShift Container Platform 4/cri-o |
GoRed Hat |
Medium
|
No fix reported |
|
| kernel: kernel: privilege escalation via missing shared fragment flag in skb_zerocopyCVE-2026-99284 |
Red Hat Enterprise Linux 6/kernelRed Hat Enterprise Linux 9/kernel-rt |
Red Hat |
High
|
No fix reported |
|
| kernel: ACPICA: Add package limit checks in parser functionsCVE-2026-97449 |
Red Hat Enterprise Linux 10/kernelRed Hat Enterprise Linux 6/kernel |
Red Hat |
Medium
|
No fix reported |
|
