RH
Product
Red Hat OpenShift GitOps
31
CVEs
0
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 5High 12Medium 12Low 2
Watch
Add Red Hat OpenShift GitOps to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-46595 | 10.0 | May 22 | Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh Affected: All versions, or not specified |
| CVE-2025-56005 | 9.8 | Jan 20 | An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via the `picklefile` parameter in the `yacc()` function Affected: All versions, or not specified |
| CVE-2026-25896 | 9.3 | Feb 20 | fast-xml-parser has an entity encoding bypass via regex injection in DOCTYPE entity names Affected: All versions, or not specified |
| CVE-2026-39832 | 9.1 | May 22 | Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent Affected: All versions, or not specified |
| CVE-2026-6388 | 9.1 | Apr 15 | Argocd-image-updater: argocd image updater: cross-namespace privilege escalation via insufficient namespace validation Affected: All versions, or not specified |
Showing 5