rhel10/rhel-bootc vulnerabilities

CVEs whose affected-version data names the rhel10/rhel-bootc package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-107935Critical· 9.3

1w ago

A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package

A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an a…

▾ MidnightRed Hat · gvisor-tap-vsockEPSS 0.30%via NVD