Red Hat Security AdvisoryRHSA-2026:3827
Red Hat OpenShift Pipelines Release 1.20.3
Released 2026-03-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Pipelines 1.20 registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9, registry.redhat.io/openshift-pipelines/pipelines-serve-tkn-cli-rhel9
Fixes 6 records
Priority MEDIUM 40
SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00668 · Published 2025-11-13 · Partial fix · 0.43.0 CWE-617
Priority LOW 39
Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00475 · Published 2025-12-04 · Partial fix · 2.0.3 CWE-405
Priority LOW 39
Vault and Vault Enterprise (“Vault”) are vulnerable to an unauthenticated denial of service when processing JSON payloads.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00531 · Published 2025-10-23 · Partial fix · 1.21.0, 1.19.11 +2 CWE-770
Priority LOW 38
Fulcio is a free-to-use certificate authority for issuing code signing certificates for an OpenID Connect (OIDC) identity.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00226 · Published 2025-12-04 · Partial fix · 1.8.3 CWE-405
Priority LOW 38
Vault and Vault Enterprise’s (“Vault”) AWS Auth method may be susceptible to authentication bypass if the role of the configured bound_principal_iam is the same across AWS accounts, or uses a wildcard.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00489 · Published 2025-10-23 · Partial fix · 1.21.0 CWE-288
Priority LOW 33
Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0049 · Published 2025-12-02 · Partial fix · 1.24.11, 1.25.5 CWE-295
THREATIST.IORead the docs