Red Hat Cert Manager support for Red Hat OpenShift release

Latest vulnerabilities

• CVE-2026-74860 CVSS 8.5 high A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially…
• CVE-2026-16118 CVSS 7.1 high A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c…
• CVE-2026-13757 CVSS 6.2 medium A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and…
• CVE-2026-54371 CVSS 8.4 high attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to…
• CVE-2026-46595 CVSS 10.0 critical Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed…
• CVE-2026-39830 CVSS 9.1 critical A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. The…
• CVE-2026-39828 CVSS 6.3 medium When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently…
• CVE-2026-39883 CVSS 7.3 high OpenTelemetry-Go is the Go implementation of OpenTelemetry. From 1.15.0 to 1.42.0, the fix for CVE-2026-24051 changed the Darwin ioreg…
• CVE-2026-29181 CVSS 7.5 high OpenTelemetry-Go is the Go implementation of OpenTelemetry. From 1.36.0 to 1.40.0, multi-value baggage: header extraction parses each…
• CVE-2025-6170 CVSS 2.5 low A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long…
• CVE-2025-5278 CVSS 4.4 medium A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may…