containers-common vulnerabilities
CVEs whose affected-version data names the containers-common package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-16487High· 8.1Bootc: containers-common: bootc: automatic updates can apply unsigned mutable-tag content under default containers policy
A flaw was found in bootc when operating with the default containers signature policy. Automatic or manual upgrades of a mutable image tag may apply unsigned content for registries that fall through to insecureAcceptAnything, allowing an…
▾ TwilightRed Hat · bootcvia CVEORG
CVE-2024-9355Medium· 6.5A vulnerability was found in Golang FIPS OpenSSL
A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false posi…
▾ SunlitRed Hat · github.com/golang-fips/opensslEPSS 0.30%via NVD