Known vulnerabilities in OpenShift Pipelines

Vendor: Red Hat Inc.
Software: OpenShift Pipelines
Software CPE: cpe:2.3:a:red_hat:openshift_pipelines:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 36
Public exploits: 5
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Pipelines OpenShift Pipelines is affected by 36 known vulnerabilities: 8 high, 22 medium, 6 low Critical High Medium Low

Vulnerabilities (36)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119999 - Resource exhaustion
CVE-2025-66506		 CWE-400 Medium
No
No
 0.21.0 16.12.2025 SB2025121628
SB2025121640
SB2025121641
and 6 more
#VU119401 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-64756		 CWE-78 Medium
No
No
 1.19.4 09.12.2025 SB2025120922
SB2025120932
SB20251210178
and 18 more
#VU116130 - Improper input validation
CVE-2025-9288		 CWE-20 Medium
No
No
 1.19.4 26.09.2025 SB2025092616
SB2025092618
SB2025092620
and 17 more
#VU115762 - Improper input validation
CVE-2025-9287		 CWE-20 Medium
No
No
 1.19.4 18.09.2025 SB2025091827
SB2025091828
SB2025091830
and 12 more
#VU111944 - Improper input validation
CVE-2025-6545		 CWE-20 Medium
No
No
 1.19.4 25.06.2025 SB2025062533
SB2025062536
SB2025062537
and 11 more
#VU111943 - Improper input validation
CVE-2025-6547		 CWE-20 Medium
No
No
 1.19.4 25.06.2025 SB2025062533
SB2025062536
SB2025062537
and 10 more
#VU80801 - Exposure of sensitive information to an unauthorized actor
CVE-2023-4641		 CWE-200 Low
No
No
 1.10.6 14.09.2023 SB2023091453
SB2023091455
SB2023101019
and 66 more
#VU79561 - Out-of-bounds write
CVE-2023-4016		 CWE-787 High
No
No
 1.10.6 15.08.2023 SB2023081548
SB20230821203
SB2023082925
and 49 more
#VU78454 - Untrusted Search Path
CVE-2023-38408		 CWE-426 Medium
Available
No
 1.10.6 20.07.2023 SB2023072068
SB2023072073
SB2023072074
and 73 more
#VU77812 - Missing release of memory after effective lifetime
CVE-2023-33460		 CWE-401 Medium
No
No
 1.10.6 29.06.2023 SB2023062940
SB2023081424
SB2023082180
and 19 more
#VU76757 - Missing release of memory after effective lifetime
CVE-2023-2602		 CWE-401 Medium
No
No
 1.10.6, 1.11.2 01.06.2023 SB2023060126
SB2023061452
SB2023070343
and 74 more
#VU75606 - Improper Certificate Validation
CVE-2023-31486		 CWE-295 Medium
No
No
 1.10.6 01.05.2023 SB2023050118
SB2023070339
SB2023101769
and 46 more
#VU75482 - Integer overflow
CVE-2022-48468		 CWE-190 High
No
No
 1.10.6 25.04.2023 SB2022072825
SB2023042551
SB2023050992
and 50 more
#VU73829 - State Issues
CVE-2023-27536		 CWE-371 Medium
No
No
 1.10.6, 1.11.2 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 80 more
#VU72703 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2023-2603		 CWE-98 High
No
No
 1.10.6, 1.11.2 01.03.2023 SB2023030118
SB2023060126
SB2023061452
and 87 more
#VU72575 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-48339		 CWE-78 High
No
No
 1.10.6 26.02.2023 SB2022120142
SB2023022605
SB2023030230
and 50 more
#VU72573 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-48337		 CWE-78 High
No
No
 1.10.6 26.02.2023 SB2022120142
SB2023022605
SB2023030230
and 42 more
#VU71529 - Resource exhaustion
CVE-2022-3094		 CWE-400 Medium
No
No
 1.10.6 25.01.2023 SB2023012556
SB2023012559
SB2023012602
and 47 more
#VU71458 - Memory corruption
CVE-2023-22745		 CWE-119 High
No
No
 1.10.6 24.01.2023 SB2023012404
SB2023022749
SB2023030333
and 42 more
#VU67583 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2007-4559		 CWE-22 High
Available
No
 1.10.6 22.09.2022 SB2007082801
SB2022120206
SB2023060825
and 68 more


Showing elements 1 - 20 out of 36