RH
Product
Red Hat OpenShift distributed tracing 3
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 7Medium 4Low 0
Watch
Add Red Hat OpenShift distributed tracing 3 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-0532 | 8.6 | Jan 14 | External Control of File Name or Path and Server-Side Request Forgery (SSRF) in Kibana Google Gemini Connector Affected: All versions, or not specified |
| CVE-2026-42151 | 7.5 | May 4 | Prometheus Azure AD remote write OAuth client secret exposed via config API Affected: All versions, or not specified |
| CVE-2025-48431 | 7.5 | Apr 28 | Apache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error. Affected: All versions, or not specified |
| CVE-2026-21728 | 7.5 | Apr 24 | Tempo query limit results in unbounded memory allocation Affected: All versions, or not specified |
| CVE-2026-29074 | 7.5 | Mar 6 | SVGO: DoS through entity expansion in DOCTYPE (Billion Laughs) Affected: All versions, or not specified |
| CVE-2026-43869 | 7.3 | May 5 | Apache Thrift: TSSLTransportFactory.java hostname verification Affected: All versions, or not specified |
| CVE-2026-41567 | 7.2 | Jun 5 | Docker: `PUT /containers/{id}/archive` executes container binary on the host Affected: All versions, or not specified |
Showing 7