rhel10/rhel-bootc vulnerabilities
CVEs whose affected-version data names the rhel10/rhel-bootc package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-114236Low· 3.3Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers
storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor limit
▾ SunlitRed Hat · openshift-sandboxed-containers/osc-podvm-builder-rhel9EPSS 0.10%via CVEORG
CVE-2026-107935Critical· 9.3A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package
A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an a…
▾ MidnightRed Hat · gvisor-tap-vsockEPSS 0.24%via NVD