Vulnérabilités de Red Hat Red Hat OpenShift GitOps

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-41606	Uncontrolled Recursion vulnerability in Apache Thrift	Non notée	28 avr. 2026
CVE-2026-41605	Integer Overflow or Wraparound vulnerability in Apache Thrift	Non notée	28 avr. 2026
CVE-2026-41604	Out-of-bounds Read vulnerability in Apache Thrift	Non notée	28 avr. 2026
CVE-2026-41603	Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift	Non notée	28 avr. 2026
CVE-2026-41602	Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue…	Non notée	28 avr. 2026
CVE-2026-40895	follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows…	6.9 Moyenne	21 avr. 2026
CVE-2026-35469	spdystream is a Go library for multiplexing streams over SPDY connections	8.7 Élevée	16 avr. 2026
CVE-2026-6388	A flaw was found in ArgoCD Image Updater	9.1 Critique	15 avr. 2026
CVE-2026-32280	During chain building, the amount of work that is done is not correctly limited when a large number of intermediate…	7.5 Élevée	8 avr. 2026
CVE-2026-32283	If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection…	7.5 Élevée	8 avr. 2026
CVE-2026-33810	When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to…	7.5 Élevée	8 avr. 2026
CVE-2026-34986	Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including…	7.5 Élevée	6 avr. 2026
CVE-2026-4800	The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same…	8.1 Élevée	31 mars 2026
CVE-2026-32285	The Delete function fails to properly validate offsets when processing malformed JSON input	7.5 Élevée	26 mars 2026
CVE-2026-4926	Impact: A bad regular expression is generated any time you have multiple sequential optional groups (curly brace…	7.5 Élevée	26 mars 2026
CVE-2026-33186	gRPC-Go is the Go language implementation of gRPC	9.1 Critique	20 mars 2026
CVE-2026-32305	Traefik is an HTTP reverse proxy and load balancer	7.8 Élevée	20 mars 2026
CVE-2026-25679	url.Parse insufficiently validated the host/authority component and accepted some invalid URLs	7.5 Élevée	6 mars 2026
CVE-2026-29063	Immutable.js provides many Persistent Immutable data structures	8.7 Élevée	6 mars 2026
CVE-2025-15558	Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not…	7.0 Élevée	4 mars 2026
CVE-2026-25896	fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based…	9.3 Critique	20 févr. 2026
CVE-2026-26278	fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based…	7.5 Élevée	19 févr. 2026
CVE-2025-69873	ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the…	2.9 Faible	11 févr. 2026
CVE-2025-11065	Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure	5.3 Moyenne	26 janv. 2026
CVE-2026-0775	npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability	7.0 Élevée	23 janv. 2026

Autres produits Red Hat