Known vulnerabilities in Red Hat Trusted Artifact Signer

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-44579	Next.js is a React framework for building full-stack web applications	7.5 High	May 13, 2026
CVE-2026-44578	Next.js is a React framework for building full-stack web applications	8.6 High	May 13, 2026
CVE-2026-44577	Next.js is a React framework for building full-stack web applications	5.9 Medium	May 13, 2026
CVE-2026-44574	Next.js is a React framework for building full-stack web applications	8.1 High	May 13, 2026
CVE-2026-44575	Next.js is a React framework for building full-stack web applications	7.5 High	May 13, 2026
CVE-2026-44573	Next.js is a React framework for building full-stack web applications	7.5 High	May 13, 2026
CVE-2026-42264	Axios is a promise based HTTP client for the browser and Node.js	7.4 High	May 8, 2026
CVE-2026-33811	When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a…	7.5 High	May 7, 2026
CVE-2026-39820	Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion…	7.5 High	May 7, 2026
CVE-2026-42499	Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322	7.5 High	May 7, 2026
CVE-2026-33814	When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it…	7.5 High	May 7, 2026
CVE-2026-42154	Prometheus is an open-source monitoring system and time series database	7.5 High	May 4, 2026
CVE-2026-42151	Prometheus is an open-source monitoring system and time series database	7.5 High	May 4, 2026
CVE-2026-42039	Axios is a promise based HTTP client for the browser and Node.js	6.9 Medium	Apr 24, 2026
CVE-2026-42041	Axios is a promise based HTTP client for the browser and Node.js	4.8 Medium	Apr 24, 2026
CVE-2026-42043	Axios is a promise based HTTP client for the browser and Node.js	7.2 High	Apr 24, 2026
CVE-2026-42033	Axios is a promise based HTTP client for the browser and Node.js	7.4 High	Apr 24, 2026
CVE-2026-40938	Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines	7.5 High	Apr 21, 2026
CVE-2026-40895	follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows…	6.9 Medium	Apr 21, 2026
CVE-2026-4660	HashiCorp’s go-getter library up to v1.8.5 may allow arbitrary file reads on the file system during certain git…	7.5 High	Apr 9, 2026
CVE-2026-32283	If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection…	7.5 High	Apr 8, 2026
CVE-2026-33815	Memory-safety vulnerability in github.com/jackc/pgx/v5	9.8 Critical	Apr 7, 2026
CVE-2026-33816	Memory-safety vulnerability in github.com/jackc/pgx/v5	9.8 Critical	Apr 7, 2026
CVE-2026-34986	Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including…	7.5 High	Apr 6, 2026
CVE-2026-4800	The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same…	8.1 High	Mar 31, 2026

Other Red Hat products