Red hat storage
This hub aggregates every CVE we track for Red hat storage. Use it to gauge the current risk picture and drill into individual advisories.
other
50
CVEs tracked
9
Critical
19
High
1
In CISA KEV
Severity distribution
HIGH19MEDIUM19CRITICAL9LOW3
Monthly trend
0
0
0
1
2
0
2
1
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
2024-072026-06
Latest CVEs
The 15 most recently published vulnerabilities affecting Red hat storage.
- CVE-2025-0426A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by...6.2
- CVE-2025-22865ParsePKCS1PrivateKey panic with partial keys in crypto/x5097.5
- CVE-2025-0306Ruby: openssl: ruby marvin attack7.4
- CVE-2024-11236Integer overflow in the firebird and dblib quoters causing OOB writes9.8
- CVE-2024-21510Versions of the package sinatra from 0.0.0 are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the X-Forwarded-Host (XFH) header. When making a request to a method with redire...5.4
- CVE-2024-10452Organization admins can delete pending invites created in an organization they are not part of.2.2
- CVE-2024-24790Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip9.8
- CVE-2024-35176REXML contains a denial of service vulnerability5.3
- CVE-2024-1135HTTP Request Smuggling in benoitc/gunicorn7.5
- CVE-2024-24784Comments in display names are incorrectly handled in net/mail7.5
- CVE-2024-21490This affects versions of the package angular from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With larg...7.5
- CVE-2023-42669Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc6.5
- CVE-2023-3961Samba: smbd allows client access to unix domain sockets on the file system as root9.1
- CVE-2023-4091Samba: smb clients can truncate files with read-only permissions6.5
- CVE-2023-43665In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.text.Truncator chars() and words() methods (when used with html=True) are subject to a potential DoS (denial o...7.5
Product normalization is registry-driven with AI assist and human review. How it works