Vulnerabilities
Summary — last 7 days
New vulnerabilities5,375▲ 2,533 vs. last week
Critical / high2,997▲ 1,635 vs. last week
New active exploitation (KEV)7▲ 1 vs. last week
Unscored (no CVSS)189▼ 11 vs. last week
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Awaiting Analysis | Medium (6.4) | 0.29% | — | Openshift Source TO ImageAI | 10/7/2026 | 10/7/2026 | A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who supplies a malicious builder image can exploit this vulnerability by embedding links pointing outside the extraction directory. This allows the… | |
| Modified | Medium (6.5) | 1.3% | — | Redhat Source-to-image | 6/12/2018 | 6/17/2026 | Openshift Enterprise source-to-image before version 1.1.10 is vulnerable to an improper validation of user input. An attacker who could trick a user into using the command to copy files locally, from a pod, could override files outside of the target directory of the command. |