Known vulnerabilities in Red Hat Trusted Artifact Signer

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-32286	The DataRow.Decode function fails to properly validate field lengths	7.5 High	Mar 26, 2026
CVE-2026-33186	gRPC-Go is the Go language implementation of gRPC	9.1 Critical	Mar 20, 2026
CVE-2026-30922	pyasn1 is a generic ASN.1 library for Python	7.5 High	Mar 18, 2026
CVE-2026-32597	PyJWT is a JSON Web Token implementation in Python	7.5 High	Mar 12, 2026
CVE-2026-29786	node-tar is a full-featured Tar for Node.js	8.2 High	Mar 7, 2026
CVE-2025-15558	Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not…	7.0 High	Mar 4, 2026
CVE-2026-26007	cryptography is a package designed to expose cryptographic primitives and recipes to Python developers	8.2 High	Feb 10, 2026
CVE-2026-25639	Axios is a promise based HTTP client for the browser and Node.js	7.5 High	Feb 9, 2026
CVE-2025-11065	Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure	5.3 Medium	Jan 26, 2026
CVE-2026-0775	npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability	7.0 High	Jan 23, 2026
CVE-2025-61686	React Router is a router for React	9.1 Critical	Jan 10, 2026
CVE-2025-8556	Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results	3.7 Low	Aug 6, 2025
CVE-2025-4574	Crossbeam-channel: crossbeam-channel vulnerable to double free on drop	6.5 Medium	May 13, 2025
CVE-2025-4432	Ring: some aes functions may panic when overflow checking is enabled in ring	5.3 Medium	May 9, 2025
CVE-2025-3416	Rust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch`	3.7 Low	Apr 8, 2025
CVE-2024-11738	A flaw was found in Rustls 0.23.13 and related APIs	5.3 Medium	Dec 6, 2024
CVE-2024-9355	Golang-fips: golang fips zeroed buffer	6.5 Medium	Oct 1, 2024

Other Red Hat products