CM
Product
Cert Manager support for Red Hat OpenShift release 1.19
18
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 4High 11Medium 3Low 0
Watch
Add Cert Manager support for Red Hat OpenShift release 1.19 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-58014 | 8.6 | Jun 30 | Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" Affected: All versions, or not specified |
| CVE-2026-58013 | 8.2 | Jun 30 | Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" Affected: All versions, or not specified |
| CVE-2026-58012 | 8.2 | Jun 30 | Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() Affected: All versions, or not specified |
| CVE-2026-58010 | 8.2 | Jun 30 | Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() Affected: All versions, or not specified |
| CVE-2026-58015 | 7.5 | Jun 30 | Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive Affected: All versions, or not specified |
| CVE-2026-58011 | 7.5 | Jun 30 | Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime Affected: All versions, or not specified |
| CVE-2026-39820 | 7.5 | May 7 | Quadratic string concatentation in consumeComment in net/mail Affected: All versions, or not specified |
| CVE-2026-42499 | 7.5 | May 7 | Quadratic string concatenation in consumePhrase in net/mail Affected: All versions, or not specified |
| CVE-2026-29181 | 7.5 | Apr 7 | OpenTelemetry-Go multi-value `baggage` header extraction causes excessive allocations (remote dos amplification) Affected: All versions, or not specified |
| CVE-2026-54371 | 7.1 | Jun 29 | attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattr Affected: All versions, or not specified |
| CVE-2026-39883 | 7.0 | Apr 8 | OpenTelemetry-Go has an incomplete fix for CVE-2026-24051: BSD kenv command not using absolute path enables PATH hijacking Affected: All versions, or not specified |
Showing 11