Red Hat Trusted Artifact Signer 1.2 vulnerabilities

Product

Red Hat Trusted Artifact Signer 1.2

by Red Hat · last CVE Jan 22, 2026

CVEs

On KEV

7.5

Max CVSS

New 30D

Severity mix

Critical 0High 3Medium 3Low 0

Severity

Exploitation

Watch

Add Red Hat Trusted Artifact Signer 1.2 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-23745	6.1	0%	Jan 16	node-tar Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization Affected: All versions, or not specified
CVE-2026-23950	5.9	0%	Jan 20	node-tar has Race Condition in Path Reservations via Unicode Ligature Collisions on macOS APFS Affected: All versions, or not specified
CVE-2026-24049	5.5	0%	Jan 22	wheel Allows Arbitrary File Permission Modification via Path Traversal Affected: All versions, or not specified