OS
Product
OpenShift Source-to-Image (S2I)
3
CVEs
0
On KEV
8.3
Max CVSS
2
New 30D
Severity mix
Critical 0High 1Medium 1Low 1
Watch
Add OpenShift Source-to-Image (S2I) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-3727 | 8.3 | May 9 | Containers/image: digest type does not guarantee valid type Affected: All versions, or not specified |
| CVE-2026-107174 | 6.4 | Oct 7 | Source-to-image: source-to-image: security boundary bypass via absolute symbolic link extraction Affected: All versions, or not specified |
| CVE-2026-114236 | 3.3 | Oct 21 | Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers Affected: All versions, or not specified |
Showing 3
