openshift4/ose-docker-builder-rhel9 vulnerabilities
CVEs whose affected-version data names the openshift4/ose-docker-builder-rhel9 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-107174Medium· 6.4A flaw was found in source-to-image
A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who supplies a malicious builder image can exploit this vulnerabili…
▾ SunlitRed Hat · openshift-serverless-1/kn-client-kn-rhel9EPSS 0.29%via NVD
CVE-2024-9407Medium· 4.7A vulnerability exists in the bind-propagation option of the Dockerfile RUN --mount instruction
A vulnerability exists in the bind-propagation option of the Dockerfile RUN --mount instruction. The system does not properly validate the input passed to this option, allowing users to pass arbitrary parameters to the mount instruction.…
▾ SunlitRed Hat · podmanEPSS 0.29%via NVD