openshift4/oc-mirror-plugin-rhel8 vulnerabilities

CVEs whose affected-version data names the openshift4/oc-mirror-plugin-rhel8 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-75939High· 7.4

3d ago

A flaw was found in openshift/oc-mirror

A flaw was found in openshift/oc-mirror. The tool incorrectly verifies PGP (Pretty Good Privacy) release image signatures by checking for signature errors before the entire signed body is processed, leading to a bypass of the signature v…

▾ TwilightRed Hat · openshift4/oc-mirror-plugin-rhel8EPSS 0.21%via NVD