CM
Product
Cert Manager support for Red Hat OpenShift release 1.18
37
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 21Medium 9Low 3
Watch
Add Cert Manager support for Red Hat OpenShift release 1.18 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-58014 | 8.6 | Jun 30 | Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" Affected: All versions, or not specified |
| CVE-2026-58013 | 8.2 | Jun 30 | Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" Affected: All versions, or not specified |
| CVE-2026-58012 | 8.2 | Jun 30 | Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() Affected: All versions, or not specified |
| CVE-2026-58010 | 8.2 | Jun 30 | Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() Affected: All versions, or not specified |
| CVE-2026-42013 | 8.2 | May 26 | Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name Affected: All versions, or not specified |
| CVE-2026-5260 | 8.2 | May 26 | Gnutls: gnutls: information disclosure via heap overread in rsa key exchange Affected: All versions, or not specified |
| CVE-2026-48864 | 7.8 | May 26 | Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data Affected: All versions, or not specified |
| CVE-2026-58015 | 7.5 | Jun 30 | Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive Affected: All versions, or not specified |
| CVE-2026-58011 | 7.5 | Jun 30 | Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime Affected: All versions, or not specified |
| CVE-2026-14164 | 7.5 | Jun 30 | Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack() Affected: All versions, or not specified |
| CVE-2026-42009 | 7.5 | May 18 | Gnutls: gnutls: denial of service via dtls packet reordering vulnerability Affected: All versions, or not specified |
| CVE-2026-33846 | 7.5 | May 4 | Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly Affected: All versions, or not specified |
| CVE-2026-5121 | 7.5 | Mar 30 | Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing Affected: All versions, or not specified |
| CVE-2026-2100 | 7.5 | Mar 26 | P11-kit: null dereference via c_derivekey with specific null parameters Affected: All versions, or not specified |
| CVE-2026-4424 | 7.5 | Mar 19 | Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing Affected: All versions, or not specified |
| CVE-2026-4111 | 7.5 | Mar 13 | Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive Affected: All versions, or not specified |
| CVE-2026-42011 | 7.4 | May 7 | Gnutls: gnutls: security bypass due to incorrect name constraint handling Affected: All versions, or not specified |
| CVE-2026-3833 | 7.4 | Apr 30 | Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison Affected: All versions, or not specified |
| CVE-2026-16118 | 7.1 | Jul 17 | Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c Affected: All versions, or not specified |
| CVE-2026-42012 | 7.1 | May 26 | Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans Affected: All versions, or not specified |
| CVE-2026-4878 | 7.0 | Apr 9 | Libcap: libcap: privilege escalation via toctou race condition in cap_set_file() Affected: All versions, or not specified |
Showing 21