| Tracing logging user input may result in poisoning logs with ANSI escape sequencesCVE-2025-58160 · GHSA-XWFJ-JGWM-7WP5بازه‌ها نیاز به بررسی دارند. |
tracing-subscriberConfidential Compute Attestation/build-of-trustee/trustee-rhel9 |
Rust / CargoRed Hat |
کم
|
اصلاح گزارش شده |
|
| containerd CRI server: Host memory exhaustion through Attach goroutine leakCVE-2025-64329 · GHSA-M6HQ-P25P-FFR2بازه‌ها نیاز به بررسی دارند. |
github.com/containerd/containerd/v2github.com/containerd/containerd |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| tar-rs `unpack_in` can chmod arbitrary directories by following symlinksCVE-2026-33056 · GHSA-J4XF-2G29-59PHبازه‌ها نیاز به بررسی دارند. |
tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9 |
Rust / CargoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| CRL Distribution Point Scope Check Logic Error in AWS-LCCVE-2026-4428 · GHSA-9F94-5G5W-GF6Rبازه‌ها نیاز به بررسی دارند. |
aws-lc-fips-sysaws-lc-sys |
Rust / CargoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| AWS-LC has Timing Side-Channel in AES-CCM Tag VerificationCVE-2026-3337 · GHSA-65P9-R9H6-22VJبازه‌ها نیاز به بررسی دارند. |
aws-lc-fips-sysaws-lc-sys |
Rust / CargoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| astral-tokio-tar insufficiently validates PAX extensions during extractionCVE-2026-32766 · GHSA-6GX3-4362-RF54بازه‌ها نیاز به بررسی دارند. |
astral-tokio-tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9 |
Rust / CargoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| time vulnerable to stack exhaustion Denial of Service attackCVE-2026-25727 · GHSA-R6V5-FH4H-64XCبازه‌ها نیاز به بررسی دارند. |
timeConfidential Compute Attestation/build-of-trustee/trustee-rhel9 |
Rust / CargoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| rsa crate has potential panic on a prime being equal to 1CVE-2026-21895 · GHSA-9C48-W39G-HM26 |
rsaConfidential Compute Attestation/build-of-trustee/trustee-rhel9 |
Rust / CargoRed Hat |
کم
|
اصلاح گزارش شده |
|
| Sequoia PGP has Subtraction Overflow when aes_key_unwrap function is provided ciphertext that is too shortCVE-2025-67897 · GHSA-V6X3-9R38-R27Qبازه‌ها نیاز به بررسی دارند. |
sequoia-openpgpConfidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9 |
Rust / CargoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Logrus is vulnerable to DoS when using Entry.Writer()CVE-2025-65637 · GHSA-4F99-4Q7P-P3GHبازه‌ها نیاز به بررسی دارند. |
github.com/sirupsen/logrusConfidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9 |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archivesCVE-2025-58058 · GHSA-JC7W-C686-C4V9بازه‌ها نیاز به بررسی دارند. |
github.com/ulikunitz/xzAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| astral-tokio-tar has a path traversal in tar extractionCVE-2025-59825 · GHSA-3WGQ-WRWC-VQMV |
astral-tokio-tarConfidential Compute Attestation/openshift-sandboxed-containers/osc-cloud-api-adaptor-rhel9 |
Rust / CargoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| curl: libssh key passphrase bypass without agent setCVE-2025-15224 |
Confidential Compute Attestation/build-of-trustee/trustee-rhel9Confidential Compute Attestation/confidential-compute-attestation-tech-preview/trustee-rhel9 |
Red Hat |
کم
|
اصلاح اعلام نشده |
|
| curl: Host verification bypass during SSH transfersCVE-2025-15079 |
Confidential Compute Attestation/build-of-trustee/trustee-rhel9Confidential Compute Attestation/confidential-compute-attestation-tech-preview/trustee-rhel9 |
Red Hat |
کم
|
اصلاح اعلام نشده |
|
| curl: libcurl: Improper certificate validation due to cached TLS settings reuseCVE-2025-14819 |
Confidential Compute Attestation/build-of-trustee/trustee-rhel9Confidential Compute Attestation/confidential-compute-attestation-tech-preview/trustee-rhel9 |
Red Hat |
کم
|
اصلاح اعلام نشده |
|
| curl: Information disclosure via cross-protocol redirect with OAuth2 bearer tokenCVE-2025-14524 |
Confidential Compute Attestation/build-of-trustee/trustee-rhel9Confidential Compute Attestation/confidential-compute-attestation-tech-preview/trustee-rhel9 |
Red Hat |
کم
|
اصلاح اعلام نشده |
|
| curl: Public key pinning bypass via QUIC and GnuTLS allows server impersonationCVE-2025-13034 |
Confidential Compute Attestation/build-of-trustee/trustee-rhel9Confidential Compute Attestation/confidential-compute-attestation-tech-preview/trustee-rhel9 |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
| curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfersCVE-2025-14017 |
Confidential Compute Attestation/build-of-trustee/trustee-rhel9Confidential Compute Attestation/confidential-compute-attestation-tech-preview/trustee-rhel9 |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
| curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authenticationCVE-2026-1965 |
Confidential Compute Attestation/build-of-trustee/trustee-rhel9Confidential Compute Attestation/confidential-compute-attestation-tech-preview/trustee-rhel9 |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
| curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirectCVE-2026-3783 |
Confidential Compute Attestation/build-of-trustee/trustee-rhel9Confidential Compute Attestation/confidential-compute-attestation-tech-preview/trustee-rhel9 |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
