Most recent entries from all

EUVD-2026-199263

2026-10-02T23:54:02.586109+00:00

EUVD-2026-199263

fkie_cve-2024-47211

2026-10-02T23:54:02.586149+00:00

In OpenStack Ironic before 21.4.4, 22.x and 23.x before 23.0.3, 23.x and 24.x before 24.1.3, and 25.x and 26.x before 26.1.0, there is a lack of checksum validation of supplied image_source URLs when configured to convert images to a raw format for streaming.

GHSA-8h22-6qwx-q4w9 — OpenStack Ironic fails to verify checksums of supplied image_source URLs

2026-10-02T23:54:02.586183+00:00

Affected: PyPI: ironic

PYSEC-2026-1468 — OpenStack Ironic fails to verify checksums of supplied image_source URLs

2026-10-02T23:54:02.586211+00:00

Affected: PyPI: ironic

RHSA-2024:6122 — Red Hat Security Advisory: OpenShift Container Platform 4.18.1 bug fix and security update

2026-10-02T23:54:02.586231+00:00

PostCSS: Improper input validation in PostCSS golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS containers/image: digest type does not guarantee valid type go-retryablehttp: url might write sensitive information to log file openshift-console: OAuth2 insufficient state parameter entropy openshift/builder: Path traversal allows command injection in privileged BuildContainer using docker build strategy Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass rsync: Info Leak via Uninitialized Stack Contents ose-olm-catalogd-container: incomplete fix for rapid reset (CVE-2023-39325/CVE-2023-44487) cross-spawn: regular expression denial of service golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON axios: axios: Server-Side Request Forgery Bare Metal Operator: BMO can expose particularly named secrets from other namespaces via BMH CRD path-to-regexp: Backtracking regular expressions cause ReDoS golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html openshift-controller-manager: Elevated Build Pods Can Lead to Node Compromise in OpenShift openstack-ironic: Lack of checksum validation on images dompurify: DOMPurify vulnerable to tampering by prototype pollution GraphQL: Denial of Service (DoS) v…

UBUNTU-CVE-2024-47211

2026-10-02T23:54:02.586293+00:00

Affected: Ubuntu:16.04:LTS: ironic, Ubuntu:18.04:LTS: ironic, Ubuntu:20.04:LTS: ironic, Ubuntu:22.04:LTS: ironic, Ubuntu:24.04:LTS: ironic, Ubuntu:25.10: ironic, Ubuntu:26.04:LTS: ironic

WID-SEC-W-2025-0170 — Red Hat OpenStack (ironic): Schwachstelle ermöglicht Manipulation von Dateien

2026-10-02T23:54:02.586321+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat OpenStack und Red Hat OpenShift ausnutzen, um Dateien zu manipulieren.