TI-2026-24814 CVE-2026-32285 · GHSA-6g7g-w4f8-9c9x
Denial of service in github.com/buger/jsonparser
Priority HIGH 72
The Delete function fails to properly validate offsets when processing malformed JSON input.
RHSA-2026:35111
Red Hat Hardened Images RPMs Security Update
Released 2026-07-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images trivy-0.72.0-0.1.hum1@aarch64, trivy-0.72.0-0.1.hum1@src, trivy-0.72.0-0.1.hum1@x86_64
Fixes 8 records
TI-2026-38567 CVE-2026-53488 · GHSA-xhf5-7wjv-pqxp
Improper input validation in backstage containerd
Priority MEDIUM 42
containerd is an open-source container runtime.
TI-2026-35984 CVE-2026-48702 · GHSA-47q9-m4ww-924m
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic
Priority LOW 39
Rekor is a software supply chain transparency log.
TI-2026-34311 CVE-2026-46680 · GHSA-fqw6-gf59-qr4w
containerd user ID handling bypass allows runAsNonRoot evasion
Priority LOW 33
containerd is an open-source container runtime.
TI-2026-30091 CVE-2026-41506 · GHSA-3xc5-wrhm-f963
go-git Credential leak via cross-host redirect in smart HTTP transport
Priority LOW 32
go-git is an extensible git implementation library written in pure Go.
TI-2026-32627 CVE-2026-44740 · GHSA-m3xc-h892-ggx6
go-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustion
Priority LOW 29
Billy is an interface filesystem abstraction for Go.
TI-2026-36954 CVE-2026-50195 · GHSA-cvxm-645q-p574
containerd: CRI checkpoint import allows local image tag poisoning
Priority LOW 25
containerd is an open-source container runtime.
TI-2026-34842 CVE-2026-47262 · GHSA-jpcc-p29g-p8mq
containerd image-triggered runtime DoS via unbounded group parsing
Priority LOW 24
containerd is an open-source container runtime.