RH
Product
Red Hat Trusted Artifact Signer
15
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 7Low 2
Watch
Add Red Hat Trusted Artifact Signer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-26007 | 6.5 | Feb 10 | cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves Affected: All versions, or not specified |
| CVE-2025-4574 | 6.5 | May 13 | Crossbeam-channel: crossbeam-channel vulnerable to double free on drop Affected: All versions, or not specified |
| CVE-2026-39828 | 6.3 | May 22 | Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh Affected: All versions, or not specified |
| CVE-2026-8643 | 5.5 | Jun 1 | pip can extract console_scripts and gui_scripts outside installation directory Affected: All versions, or not specified |
| CVE-2026-39835 | 5.3 | May 22 | Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh Affected: All versions, or not specified |
| CVE-2025-11065 | 5.3 | Jan 26 | Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure Affected: All versions, or not specified |
| CVE-2025-4432 | 5.3 | May 9 | Ring: some aes functions may panic when overflow checking is enabled in ring Affected: All versions, or not specified |
Showing 7