VulnSea

hardened_images vulnerabilities

CVEs whose affected-version data names the hardened_images package (go, pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

115 CVEsRSS

CVE-2026-8328Medium· 5.3
4mo ago

The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed

The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv() was patched to replace server-supplied PASV host addresses with the actual peer address (getpeername()[0]), ftpcp() still calls parse…

▾ SunlitRed Hat · Red Hat Hardened ImagesEPSS 0.68%via NVD
CVE-2026-44431Medium· 5.3
4mo ago

urllib3 is an HTTP client library for Python

urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive hea…

▾ SunlitRed Hat · Red Hat Enterprise Linux AppStream (v. 8)EPSS 0.34%via NVD
CVE-2026-42501Medium· 5.3
4mo ago

cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy (CVE-2026-42501)

A flaw was found in the Go command (`cmd/go`). A malicious module proxy can exploit this vulnerability by bypassing the validation of module checksums. This allows the proxy to serve altered versions of the Go toolchain, which the `go` com…

▾ SunlitRed Hat · Red Hat Enterprise Linux AppStream (v. 8)EPSS 0.29%via CSAF
CVE-2026-39836High· 7.5
4mo ago

net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows (CVE-2026-39836)

A flaw was found in the `net` package of Go (golang). When running on Windows, the `Dial` and `LookupPort` functions can panic if they receive an input containing a NUL (0) byte. This can be triggered by a remote attacker providing a speci…

▾ TwilightRed Hat · Red Hat Enterprise Linux AppStream (v. 8)EPSS 0.62%via CSAF
CVE-2026-42010High· 7.1
4mo ago

A flaw was found in gnutls

A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a spec…

▾ Twilightgnu · gnutlsEPSS 0.94%via NVD
CVE-2026-3833Medium· 6.5PoC
5mo ago

A flaw was found in gnutls

A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within `excludedSubtrees` or `perm…

▾ Twilightgnu · gnutlsEPSS 0.89%via NVD
CVE-2026-6357Medium· 5.8
5mo ago

pip: pip: Arbitrary code execution or information disclosure via malicious wheel package installation (CVE-2026-6357)

A flaw was found in pip. Prior to version 26.1, pip's self-update check functionality would execute after installing wheel packages. This process involved importing newly installed Python modules. A malicious actor could craft a specially …

▾ SunlitRed Hat · Red Hat OpenShift AI (RHOAI)EPSS 0.17%via CSAF
CVE-2026-41989High· 7.5
5mo ago

Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext (CVE-2026-41989)

A flaw was found in Libgcrypt. A remote attacker could exploit this vulnerability by sending crafted Elliptic Curve Diffie-Hellman (ECDH) ciphertext to the `gcry_pk_decrypt` function. This can lead to a heap-based buffer overflow, potentia…

▾ TwilightRed Hat · Red Hat Enterprise Linux BaseOS (v. 8)EPSS 0.19%via CSAF
CVE-2026-6732Medium· 6.5
5mo ago

A flaw was found in libxml2

A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing …

▾ Sunlitxmlsoft · libxml2EPSS 0.94%via NVD
CVE-2026-6844Medium· 5.5
5mo ago

A flaw was found in the `readelf` utility of the binutils package

A flaw was found in the `readelf` utility of the binutils package. A local attacker could exploit two Denial of Service (DoS) vulnerabilities by providing a specially crafted Executable and Linkable Format (ELF) file. One vulnerability, …

▾ Sunlitgnu · binutilsEPSS 0.15%via NVD
CVE-2026-6845Medium· 5.0
5mo ago

A flaw was found in binutils, specifically within the `readelf` utility

A flaw was found in binutils, specifically within the `readelf` utility. This vulnerability allows a local attacker to cause a Denial of Service (DoS) by tricking a user into processing a specially crafted Executable and Linkable Format …

▾ Sunlitgnu · binutilsEPSS 0.14%via NVD
CVE-2026-6846High· 7.8
5mo ago

A flaw was found in binutils

A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF (Extended Common Object File Format) object file during linking. A local attacker could trick a user into processing this…

▾ Twilightgnu · binutilsEPSS 0.20%via NVD
CVE-2026-33813High· 7.5
5mo ago

Parsing a WEBP image with an invalid, large size panics on 32-bit platforms.

Parsing a WEBP image with an invalid, large size panics on 32-bit platforms.

▾ TwilightRed Hat · Red Hat Enterprise Linux 8EPSS 0.62%via NVD
CVE-2026-1584High· 7.5
5mo ago

A flaw was found in gnutls

A flaw was found in gnutls. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted ClientHello message with an invalid Pre-Shared Key (PSK) binder value during the TLS handshake. This can lead to…

▾ Twilightgnu · gnutlsEPSS 1.3%via NVD
CVE-2026-5745Medium· 5.5
5mo ago

A flaw was found in libarchive

A flaw was found in libarchive. A NULL pointer dereference vulnerability exists in the ACL parsing logic, specifically within the archive_acl_from_text_nl() function. When processing a malformed ACL string (such as a bare "d" or "default…

▾ Sunlitlibarchive · libarchiveEPSS 0.17%via NVD
CVE-2026-33816High· 8.3
5mo ago

github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33816)

A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting…

▾ TwilightRed Hat · Red Hat Openshift Data Foundation 4.20EPSS 0.86%via CSAF
CVE-2026-33815High· 8.3
5mo ago

github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33815)

A flaw was found in github.com/jackc/pgx. This memory-safety vulnerability could potentially lead to unexpected behavior or system instability.

▾ TwilightRed Hat · Red Hat Openshift Data Foundation 4.20EPSS 0.86%via CSAF
CVE-2026-5704Medium· 5.0
5mo ago

A flaw was found in tar

A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, pot…

▾ Sunlitgnu · tarEPSS 0.40%via NVD
CVE-2026-2625Medium· 4.0
5mo ago

A flaw was found in rust-rpm-sequoia

A flaw was found in rust-rpm-sequoia. An attacker can exploit this vulnerability by providing a specially crafted Red Hat Package Manager (RPM) file. During the RPM signature verification process, this crafted file can trigger an error i…

▾ Sunlitredhat · hardened_imagesEPSS 0.11%via NVD
CVE-2026-3184Low· 3.7
5mo ago

A flaw was found in util-linux

A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied remote hostname before setting `PAM_RHOST`. A remote attacker could exploit this by …

▾ Sunlitkernel · util-linuxEPSS 0.62%via NVD
CVE-2026-5121High· 7.5
6mo ago

A flaw was found in libarchive

A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead t…

▾ Twilightlibarchive · libarchiveEPSS 1.4%via NVD
CVE-2026-0966High· 8.2
6mo ago

A flaw was found in libssh

A flaw was found in libssh. The API function `ssh_get_hexa()` is vulnerable to a denial of service when processing zero-length input. This can be exploited remotely by an attacker during GSSAPI (Generic Security Service Application Progr…

▾ Twilightlibssh · libsshEPSS 0.58%via NVD
CVE-2026-0964Medium· 6.3
6mo ago

A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory. This could be misused to create malicious executable or configuration files and make the user exec…

A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory. This could be misused to create malicious executable or configuration files and make the user exec…

▾ Sunlitlibssh · libsshEPSS 0.41%via NVD
CVE-2026-4424High· 7.5
6mo ago

A flaw was found in libarchive

A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote atta…

▾ Twilightlibarchive · libarchiveEPSS 1.1%via NVD
CVE-2026-4426Medium· 6.5
6mo ago

A flaw was found in libarchive

A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of a field (`pz_log2_bs`) read from ISO9660 Rock Ridge extensions. A remote attacker can exploit …

▾ Sunlitlibarchive · libarchiveEPSS 0.56%via NVD
hardened_images vulnerabilities (CVEs) — page 4 · VulnSea