Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium5.5A flaw was found in Red Hat Quay's Proxy Cache configuration feature.EPSS 0.5%Apr 8, 2026
- High8.8A flaw was found in Red Hat Quay's handling of resumable container image layer uploads.EPSS 0.8%Apr 8, 2026
- High7.4A flaw was found in Red Hat Quay's container image upload process.EPSS 0.4%Apr 8, 2026
- Medium6.5A flaw was found in Red Hat Quay and mirror registry for Red Hat OpenShift.EPSS 0.4%Apr 8, 2026
- Medium5.3A flaw was found in the OpenShift Mirror Registry.EPSS 0.3%Apr 8, 2026
- Medium6.4A container privilege escalation flaw was found in certain Red Hat Process Automation Manager images.EPSS 0.1%Apr 8, 2026
- High8.2A flaw was found in Open Cluster Management (OCM), the technology underlying Red Hat Advanced Cluster Management (ACM).Apr 7, 2026
- Medium5.5A flaw was found in rust-rpm-sequoia.EPSS 0.1%Apr 3, 2026
- Critical9.8lodash vulnerable to Code Injection via imports key namesEPSS 2.6%Mar 31, 2026
- High7.5Node.js: Node.js: Denial of Service due to crafted HTTP headerEPSS 25.0%Mar 30, 2026
- High7.5A flaw was found in libarchive.EPSS 1.4%Mar 30, 2026
- Critical9.1Forge (also called ) is a native implementation of Transport Layer Security in JavaScript.EPSS 0.5%Mar 27, 2026
- High7.5Forge (also called ) is a native implementation of Transport Layer Security in JavaScript.EPSS 0.5%Mar 27, 2026
- High7.5Forge (also called ) is a native implementation of Transport Layer Security in JavaScript.EPSS 0.4%Mar 27, 2026
- High7.5Forge (also called ) is a native implementation of Transport Layer Security in JavaScript.EPSS 0.9%Mar 27, 2026
- High8.1A flaw was found in Red Hat OpenShift AI (RHOAI) llama-stack-operator.EPSS 0.4%Mar 26, 2026
- High7.5Impact: A bad regular expression is generated any time you have multiple sequential optional groups (curly brace syntax), such as .Mar 26, 2026
- High7.3Vim is an open source, command line text editor.EPSS 0.9%Mar 24, 2026
- Critical9.8flatted is a circular JSON parser.EPSS 1.3%Mar 20, 2026
- Critical9.1gRPC-Go is the Go language implementation of gRPC.EPSS 1.7%Mar 20, 2026
- High7.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVEPSS 2.4%Mar 20, 2026
- High7.1The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers.Mar 20, 2026
- High7.5fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks.EPSS 0.8%Mar 20, 2026
- High7.5Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processingEPSS 1.1%Mar 19, 2026
- High7.5nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C.EPSS 0.9%Mar 18, 2026