RH
Product
Red Hat Trusted Artifact Signer 1.3
49
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 9High 30Medium 10Low 0
Watch
Add Red Hat Trusted Artifact Signer 1.3 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-62718 | 9.9 | Apr 9 | Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF Affected: All versions, or not specified |
| CVE-2026-33816 | 9.8 | Apr 7 | CVE-2026-33816 in github.com/jackc/pgx Affected: All versions, or not specified |
| CVE-2026-33815 | 9.8 | Apr 7 | CVE-2026-33815 in github.com/jackc/pgx Affected: All versions, or not specified |
| CVE-2026-4800 | 9.8 | Mar 31 | lodash vulnerable to Code Injection via `_.template` imports key names Affected: All versions, or not specified |
| CVE-2026-27606 | 9.8 | Feb 25 | Rollup 4 has Arbitrary File Write via Path Traversal Affected: All versions, or not specified |
| CVE-2026-33211 | 9.6 | Mar 23 | Tekton Pipelines git resolver has path traversal that allows reading arbitrary files from the resolver pod Affected: All versions, or not specified |
| CVE-2026-39830 | 9.1 | May 22 | Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh Affected: All versions, or not specified |
| CVE-2026-39832 | 9.1 | May 22 | Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent Affected: All versions, or not specified |
| CVE-2026-42044 | 9.1 | Apr 24 | Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver` Affected: All versions, or not specified |
Showing 9