Vulnerabilities
Summary — last 7 days
New vulnerabilities5,107▲ 1,957 vs. last week
Critical / high2,827▲ 1,283 vs. last week
New active exploitation (KEV)9▲ 4 vs. last week
Unscored (no CVSS)184▼ 23 vs. last week
4 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Low (2.1) | 0.19% | — | ZincatiAIFedora CoreosAIProjectatomic Rpm-ostreeAI | 3/17/2025 | 6/17/2026 | Zincati is an auto-update agent for Fedora CoreOS hosts. Zincati ships a polkit rule which allows the `zincati` system user to use the actions `org.projectatomic.rpmostree1.deploy` to deploy updates to the system and `org.projectatomic.rpmostree1.finalize-deployment` to reboot the system into the deployed update.… | |
| Deferred | Medium (6.2) | 0.33% | — | Rpm-ostreeAI | 4/25/2024 | 6/17/2026 | A security vulnerability has been discovered within rpm-ostree, pertaining to the /etc/shadow file in default builds having the world-readable bit enabled. This issue arises from the default permissions being set at a higher level than recommended, potentially exposing sensitive authentication data to unauthorized… | |
| Modified | High (7.5) | 0.87% | — | Ostree Project Ostree | 7/18/2023 | 6/17/2026 | An issue was discovered in ostree before 2022.7 allows attackers to cause a denial of service or other unspecified impacts via the print_panic function in repo_checkout_filter.rs. | |
| Modified | Medium (5.3) | 1.0% | — | Rpm-ostreeRpm-ostree-clientRedhat Enterprise Linux | 7/27/2018 | 6/17/2026 | It was discovered that rpm-ostree and rpm-ostree-client before 2017.3 fail to properly check GPG signatures on packages when doing layering. Packages with unsigned or badly signed content could fail to be rejected as expected. This issue is partially mitigated on RHEL Atomic Host, where certificate pinning is used by… |