UI
Product
Update Infrastructure
9
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 4Low 0
Watch
Add Update Infrastructure to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-42055 | 8.1 | Jun 17 | NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability Affected: 5.0 before 5.2 |
| CVE-2026-9256 | 8.1 | May 22 | NGINX ngx_http_rewrite_module vulnerability Affected: 5.0 before 5.2 |
| CVE-2026-48864 | 7.8 | May 26 | Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data Affected: 4 |
| CVE-2023-50782 | 7.5 | Feb 5 | A flaw was found in the python-cryptography package Affected: 4 |
| CVE-2023-50781 | 7.5 | Feb 5 | M2crypto: bleichenbacher timing attacks in the rsa decryption api - incomplete fix for cve-2020-25657 Affected: 4 |
| CVE-2026-9149 | 6.5 | May 20 | Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file Affected: 4 |
| CVE-2026-9150 | 6.5 | May 20 | Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums Affected: 4 |
| CVE-2022-3644 | 5.5 | Oct 25 | The collection remote for pulp_ansible stores tokens in plaintext instead of using pulp's encrypted field and exposes them in read/write mode via the API () instead of marking it… Affected: 3.0 |
| CVE-2013-4518 | 5.5 | Nov 4 | RHUI (Red Hat Update Infrastructure) 2.1.3 has world readable PKI entitlement certificates Affected: 2.1.3 |
Showing 9