insights-core vulnerabilities

CVEs whose affected-version data names the insights-core package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-19391Medium· 6.5

2mo ago

Insights-core: insights-core: incomplete credential redaction exposes sssd bind passwords and pacemaker fence credentials in uploaded archives

A flaw was found in insights-core where the password redaction layer fails to recognize credentials not keyed under the literal string 'password'. This allows SSSD LDAP bind passwords (ldap_default_authtok) and Pacemaker fence device cre…

▾ SunlitRed Hat · pen-drive/pen-drive-scanner-rhel9EPSS 0.24%via CVEORG