CM
Product
Cert Manager support for Red Hat OpenShift release 1.18
37
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 21Medium 9Low 3
Watch
Add Cert Manager support for Red Hat OpenShift release 1.18 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-42010 | 9.8 | May 7 | Gnutls: gnutls: authentication bypass via nul character in username Affected: All versions, or not specified |
| CVE-2025-14087 | 9.8 | Dec 10 | Glib: glib: buffer underflow in gvariant parser leads to heap corruption Affected: All versions, or not specified |
| CVE-2026-58016 | 9.1 | Jun 30 | Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" Affected: All versions, or not specified |
| CVE-2026-33845 | 9.1 | Apr 30 | Gnutls: gnutls: denial of service via dtls zero-length fragment Affected: All versions, or not specified |
| CVE-2026-58014 | 8.6 | Jun 30 | Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" Affected: All versions, or not specified |
| CVE-2026-58013 | 8.2 | Jun 30 | Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" Affected: All versions, or not specified |
| CVE-2026-58012 | 8.2 | Jun 30 | Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() Affected: All versions, or not specified |
| CVE-2026-58010 | 8.2 | Jun 30 | Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() Affected: All versions, or not specified |
| CVE-2026-42013 | 8.2 | May 26 | Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name Affected: All versions, or not specified |
| CVE-2026-5260 | 8.2 | May 26 | Gnutls: gnutls: information disclosure via heap overread in rsa key exchange Affected: All versions, or not specified |
| CVE-2026-48864 | 7.8 | May 26 | Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data Affected: All versions, or not specified |
| CVE-2026-58015 | 7.5 | Jun 30 | Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive Affected: All versions, or not specified |
| CVE-2026-58011 | 7.5 | Jun 30 | Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime Affected: All versions, or not specified |
| CVE-2026-14164 | 7.5 | Jun 30 | Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack() Affected: All versions, or not specified |
| CVE-2026-42009 | 7.5 | May 18 | Gnutls: gnutls: denial of service via dtls packet reordering vulnerability Affected: All versions, or not specified |
| CVE-2026-33846 | 7.5 | May 4 | Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly Affected: All versions, or not specified |
| CVE-2026-5121 | 7.5 | Mar 30 | Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing Affected: All versions, or not specified |
| CVE-2026-2100 | 7.5 | Mar 26 | P11-kit: null dereference via c_derivekey with specific null parameters Affected: All versions, or not specified |
| CVE-2026-4424 | 7.5 | Mar 19 | Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing Affected: All versions, or not specified |
| CVE-2026-4111 | 7.5 | Mar 13 | Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive Affected: All versions, or not specified |
| CVE-2026-42011 | 7.4 | May 7 | Gnutls: gnutls: security bypass due to incorrect name constraint handling Affected: All versions, or not specified |
| CVE-2026-3833 | 7.4 | Apr 30 | Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison Affected: All versions, or not specified |
| CVE-2026-16118 | 7.1 | Jul 17 | Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c Affected: All versions, or not specified |
| CVE-2026-42012 | 7.1 | May 26 | Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans Affected: All versions, or not specified |
| CVE-2026-4878 | 7.0 | Apr 9 | Libcap: libcap: privilege escalation via toctou race condition in cap_set_file() Affected: All versions, or not specified |
| CVE-2026-42014 | 6.6 | Jun 16 | Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin Affected: All versions, or not specified |
| CVE-2025-14512 | 6.5 | Dec 11 | Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow Affected: All versions, or not specified |
| CVE-2026-13757 | 6.2 | Jun 29 | P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing Affected: All versions, or not specified |
| CVE-2025-14104 | 6.1 | Dec 5 | Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames Affected: All versions, or not specified |
| CVE-2026-15588 | 5.3 | Jul 20 | Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering Affected: All versions, or not specified |
| CVE-2026-42015 | 5.3 | May 26 | Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling Affected: All versions, or not specified |
| CVE-2025-14831 | 5.3 | Feb 9 | Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification Affected: All versions, or not specified |
| CVE-2025-5278 | 4.4 | May 27 | Coreutils: heap buffer under-read in gnu coreutils sort via key specification Affected: All versions, or not specified |
| CVE-2025-9820 | 4.0 | Jan 26 | Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function Affected: All versions, or not specified |
| CVE-2026-5419 | 3.7 | Jun 1 | Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal Affected: All versions, or not specified |
| CVE-2026-3832 | 3.7 | Apr 30 | Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response Affected: All versions, or not specified |
| CVE-2025-6170 | 2.5 | Jun 16 | Libxml2: stack buffer overflow in xmllint interactive shell command handling Affected: All versions, or not specified |
Showing 37