openshift4/oc-mirror-plugin-rhel8 vulnerabilities
CVEs whose affected-version data names the openshift4/oc-mirror-plugin-rhel8 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-101295High· 7.3Path traversal / arbitrary file write in oc-mirror's operator catalog image extraction
Path traversal / arbitrary file write in oc-mirror's operator catalog image extraction. When mirroring operator catalogs using either the legacy v1 path (--v1) or the OCI feature path (--use-oci-feature), oc-mirror extracts tar entries f…
CVE-2026-75939High· 7.4A flaw was found in openshift/oc-mirror
A flaw was found in openshift/oc-mirror. The tool incorrectly verifies PGP (Pretty Good Privacy) release image signatures by checking for signature errors before the entire signed body is processed, leading to a bypass of the signature v…
CVE-2024-1139High· 7.7A credentials leak vulnerability was found in the cluster monitoring operator in OCP
A credentials leak vulnerability was found in the cluster monitoring operator in OCP. This issue may allow a remote attacker who has basic login credentials to check the pod manifest to discover a repository pull secret.