Red Hat OpenShift Serverless vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 202410
3. 20254
4. 20264

Newest CVEs

• CVE-2026-50240

  Pipelines-as-code: openshift-pipelines-operator-rh: pipelines-as-code: repository users can trigger namespace edit-equivalent execution via auto-provisioned pipeline serviceaccount

  Red Hat · Builds for Red Hat OpenShift

  High8.8
• CVE-2026-107912

  Io.quarkus/quarkus-vertx-http: quarkus-vertx-http: authorization bypass in management interface via path concatenation flaw

  Red Hat · Exploit Intelligence

  High7.7
• CVE-2026-107174

  Source-to-image: source-to-image: security boundary bypass via absolute symbolic link extraction

  Red Hat · OpenShift Serverless

  Medium6.4
• CVE-2026-87743

  Quarkus-vertx-http: authorization bypass via path normalization discrepancy in quarkus http security

  Red Hat · Red Hat build of Quarkus 3.27.5.SP2

  High7.5
• CVE-2024-3884

  Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded

  Red Hat · Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

  High7.5
• CVE-2025-10894

  Nx: nx/devkit: malicious versions of nx and plugins published to npm

  nx

  Critical9.6
• CVE-2025-8556

  Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results

  circl

  Low3.7
• CVE-2024-11831

  Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript

  serialize-javascript

  Medium5.4
• CVE-2024-12401

  Cert-manager: potential dos when parsing specially crafted pem inputs

  cert-manager

  Medium4.4
• CVE-2024-9355

  Golang-fips: golang fips zeroed buffer

  github.com/golang-fips/openssl

  Medium6.5