source-to-image/source-to-image-rhel8 vulnerabilities

CVEs whose affected-version data names the source-to-image/source-to-image-rhel8 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-107174Medium· 6.4

today

A flaw was found in source-to-image

A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who supplies a malicious builder image can exploit this vulnerabili…

▾ SunlitRed Hat · openshift-serverless-1/kn-client-kn-rhel9via NVD