LS
Product
Logging Subsystem for Red Hat OpenShift
36
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 23Medium 6Low 1
Watch
Add Logging Subsystem for Red Hat OpenShift to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-4800 | 9.8 | Mar 31 | lodash vulnerable to Code Injection via `_.template` imports key names Affected: All versions, or not specified |
| CVE-2026-33937 | 9.8 | Mar 27 | Handlebars.js has JavaScript Injection via AST Type Confusion Affected: All versions, or not specified |
| CVE-2026-32304 | 9.8 | Mar 12 | Locutus: RCE via unsanitized input in create_function() Affected: All versions, or not specified |
| CVE-2026-28292 | 9.8 | Mar 10 | simple-git has blockUnsafeOperationsPlugin bypass via case-insensitive protocol.allow config key that enables RCE Affected: All versions, or not specified |
| CVE-2026-29063 | 9.8 | Mar 6 | Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable Affected: All versions, or not specified |
| CVE-2026-33896 | 9.1 | Mar 27 | Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation) Affected: All versions, or not specified |
Showing 6