Vulnérabilités connues pour Red Hat OpenShift Serverless

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2025-67030	Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before…	8.8 Élevée	25 mars 2026
CVE-2026-33211	Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines	9.6 Critique	23 mars 2026
CVE-2026-33186	gRPC-Go is the Go language implementation of gRPC	9.1 Critique	20 mars 2026
CVE-2026-31837	Istio is an open platform to connect, manage, and secure microservices	8.7 Élevée	10 mars 2026
CVE-2026-25679	url.Parse insufficiently validated the host/authority component and accepted some invalid URLs	7.5 Élevée	6 mars 2026
CVE-2026-27137	When verifying a certificate chain which contains a certificate containing multiple email address constraints which…	7.5 Élevée	6 mars 2026
CVE-2025-15558	Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not…	7.0 Élevée	4 mars 2026
CVE-2026-28406	kaniko is a tool to build container images from a Dockerfile, inside a container or Kubernetes cluster	8.2 Élevée	27 févr. 2026
CVE-2026-27896	The Go MCP SDK used Go's standard encoding/json.Unmarshal for JSON-RPC and MCP protocol message parsing in versions…	7.0 Élevée	26 févr. 2026
CVE-2024-4027	Undertow: outofmemoryerror in httpservletrequestimpl.getparameternames() can cause remote dos attacks	7.5 Élevée	30 janv. 2026
CVE-2025-61726	The net/url package does not set a limit on the number of query parameters in a query	7.5 Élevée	28 janv. 2026
CVE-2026-0775	npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability	7.0 Élevée	23 janv. 2026
CVE-2026-23950	node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3	8.8 Élevée	20 janv. 2026
CVE-2026-23745	node-tar is a Tar for Node.js	8.2 Élevée	16 janv. 2026
CVE-2026-21441	urllib3 is an HTTP client library for Python	8.9 Élevée	7 janv. 2026
CVE-2024-3884	Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded	Élevée	3 déc. 2025
CVE-2025-10894	Malicious code was inserted into the Nx (build system) package and several related plugins	9.6 Critique	24 sept. 2025
CVE-2025-8556	Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results	3.7 Faible	6 août 2025
CVE-2024-11831	Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript	5.4 Moyenne	10 févr. 2025
CVE-2024-12401	A flaw was found in the cert-manager package	4.4 Moyenne	12 déc. 2024
CVE-2024-9355	Golang-fips: golang fips zeroed buffer	6.5 Moyenne	1 oct. 2024
CVE-2024-3653	Undertow: learningpushhandler can lead to remote memory dos attacks	5.3 Moyenne	8 juil. 2024
CVE-2024-3727	Containers/image: digest type does not guarantee valid type	8.3 Élevée	9 mai 2024
CVE-2023-5675	Quarkus: authorization flaw in quarkus resteasy reactive and classic when "quarkus.security.jaxrs.deny-unannotated-endpoints" or "quarkus.security.jaxrs.default-roles-allowed" properties are used.	6.5 Moyenne	25 avr. 2024
CVE-2024-1300	Io.vertx:vertx-core: memory leak when a tcp server is configured with tls and sni support	5.4 Moyenne	2 avr. 2024

Autres produits Red Hat