Known vulnerabilities in osbuild-composer (Red Hat package)
Vendor:
Red Hat Inc.
Software:
osbuild-composer (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:osbuild-composer_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
33
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
132.2-12.el9_6
76.1-9.el9_2
101.3-4.el9_4.6
76.1-8.el9_2
101.3-4.el9_4.5
132.2-11.el9_6
132.2-10.el9_6
101.3-4.el9_4.4
46.3-7.el8_6
28.7-6.el8_4
75-9.el8_8
165.1-4.el9_8
76.1-6.el9_2
101.5-1.el8_10
101.3-4.el9_4.2
134.1-9.el10_0
132.2-9.el9_6
134.1-8.el10_0
132.2-8.el9_6
101.3-4.el9_4.1
165.1-2.el9_8
165.1-2.el10_2
134.1-7.el10_0
132.2-6.el9_6
134.1-6.el10_0
149-5.el9_7
101.4-5.el8_10
134.1-5.el10_0
46.3-6.el8_6
132.2-5.el9_6
46.3-7.el9_0
28.7-5.el8_4
76.1-5.el9_2
75-7.el8_8
101.3-4.el9_4
101.4-4.el8_10
149-4.el9_7
149-5.el10_1
76.1-4.el9_2
46.3-5.el8_6
46.3-6.el9_0
75-6.el8_8
149-4.el10_1
101.4-3.el8_10
149-3.el9_7
101.4-2.el8_10
132.2-4.el9_6
134.1-4.el10_0
46.3-4.el8_6
28.7-4.el8_4
75-5.el8_8
76.1-3.el9_2
46.3-5.el9_0
134.1-3.el10_0
132.2-1.el9_6
101-4.el8_10
28.7-3.el8_4
46.3-3.el8_6
75-4.el8_8
46.3-4.el9_0
101.3-2.el9_4
76.1-2.el9_2
132.2-2.el9_6
134.1-2.el10_0
46.3-3.el9_0
75-3.el8_8
101-3.el8_10
118.2-1.el9_5
76.1-1.el9_2
101.3-1.el9_4
118-2.el9_5
101-2.el8_10
46.3-2.el8_6
46.3-2.el9_0
76-3.el9_2.2
28.7-2.el8_4
75-2.el8_8
101-2.el9_4
101-1.el8
101-1.el9
75-1.el8
76-2.el9_2
62.1-1.el9
62-1.el8
Vulnerabilities (33)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU144181 - Uncontrolled Recursion CVE-2026-33818 |
CWE-674 | Medium | 76.1-9.el9_2, 101.3-4.el9_4.6, 132.2-12.el9_6 | 18.08.2026 |
SB2026081856 SB2026082658 SB2026082659 and 10 more |
||
| #VU144180 - Uncontrolled Recursion CVE-2026-56859 |
CWE-674 | Medium | 76.1-9.el9_2, 101.3-4.el9_4.6, 132.2-12.el9_6 | 18.08.2026 |
SB2026081856 SB2026082658 SB2026082659 and 9 more |
||
| #VU144179 - Resource exhaustion CVE-2026-56853 |
CWE-400 | Medium | 76.1-9.el9_2, 101.3-4.el9_4.6, 132.2-12.el9_6 | 18.08.2026 |
SB2026081856 SB2026082658 SB2026082659 and 9 more |
||
| #VU144178 - Improper control of a resource through its lifetime CVE-2026-56862 |
CWE-664 | Medium | 76.1-9.el9_2, 101.3-4.el9_4.6, 132.2-12.el9_6 | 18.08.2026 |
SB2026081856 SB2026082658 SB2026082659 and 10 more |
||
| #VU144177 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-56858 |
CWE-79 | Medium | 76.1-9.el9_2, 101.3-4.el9_4.6, 132.2-12.el9_6 | 18.08.2026 |
SB2026081856 SB2026082658 SB2026082659 and 8 more |
||
| #VU144174 - Resource exhaustion CVE-2026-56860 |
CWE-400 | Medium | 76.1-9.el9_2, 101.3-4.el9_4.6, 132.2-12.el9_6 | 18.08.2026 |
SB2026081856 SB2026082658 SB2026082659 and 10 more |
||
| #VU140615 - Resource exhaustion CVE-2026-42499 |
CWE-400 | Medium | 76.1-9.el9_2, 101.3-4.el9_4.6, 132.2-12.el9_6 | 31.07.2026 |
SB2026073126 SB2026082630 SB2026082635 and 7 more |
||
| #VU140608 - Resource exhaustion CVE-2026-39820 |
CWE-400 | Medium | 76.1-9.el9_2, 101.3-4.el9_4.6, 132.2-12.el9_6 | 31.07.2026 |
SB2026073126 SB2026081985 SB2026082635 and 7 more |
||
| #VU140607 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2026-32282 |
CWE-367 | Low | 76.1-6.el9_2, 101.5-1.el8_10, 134.1-7.el10_0 | 31.07.2026 |
SB2026073125 SB2026073160 SB2026073161 and 50 more |
||
| #VU140600 - Improper input validation CVE-2026-32281 |
CWE-20 | Medium | 76.1-6.el9_2, 132.2-8.el9_6, 134.1-8.el10_0, 165.1-4.el9_8 | 31.07.2026 |
SB2026073125 SB2026073183 SB2026073184 and 37 more |
||
| #VU140599 - Resource exhaustion CVE-2026-32280 |
CWE-400 | Medium | 76.1-6.el9_2, 101.5-1.el8_10, 134.1-7.el10_0, 165.1-4.el9_8 | 31.07.2026 |
SB2026073125 SB2026073160 SB2026073161 and 72 more |
||
| #VU136680 - Dependency on Vulnerable Third-Party Component CVE-2026-32283 |
CWE-1395 | Medium | 76.1-6.el9_2, 101.5-1.el8_10, 134.1-7.el10_0 | 02.07.2026 |
SB2026070218 SB2026070239 SB2026070240 and 61 more |
||
| #VU128730 - Improper Authorization CVE-2026-33186 |
CWE-285 | High | 101.3-4.el9_4.4, 101.5-1.el8_10, 132.2-9.el9_6, 134.1-9.el10_0 | 01.05.2026 |
SB2026050106 SB2026050107 SB2026050108 and 69 more |
||
| #VU125945 - Improper input validation CVE-2026-34986 |
CWE-20 | Medium | 101.3-4.el9_4.2, 101.5-1.el8_10, 132.2-8.el9_6, 134.1-9.el10_0 | 14.04.2026 |
SB2026041463 SB2026041464 SB2026041465 and 74 more |
||
| #VU124118 - Improper input validation CVE-2026-25679 |
CWE-20 | Medium | 28.7-6.el8_4, 46.3-7.el8_6, 75-9.el8_8, 76.1-6.el9_2, 101.3-4.el9_4.1, 101.4-5.el8_10, 132.2-6.el9_6, 134.1-7.el10_0, 149-5.el9_7 | 19.03.2026 |
SB2026031903 SB2026031904 SB2026031905 and 134 more |
||
| #VU124034 - Resource exhaustion CVE-2025-61726 |
CWE-400 | Medium | 28.7-5.el8_4, 46.3-6.el8_6, 46.3-7.el9_0, 75-7.el8_8, 76.1-5.el9_2, 101.3-4.el9_4, 101.4-4.el8_10, 132.2-5.el9_6, 134.1-5.el10_0, 149-4.el9_7, 149-5.el10_1 | 16.03.2026 |
SB2026031636 SB2026031637 SB2026031638 and 143 more |
||
| #VU124033 - Improper input validation CVE-2025-61728 |
CWE-20 | Medium | 149-4.el9_7, 149-5.el10_1 | 16.03.2026 |
SB2026031636 SB2026031637 SB2026031638 and 46 more |
||
| #VU123129 - Improper Certificate Validation CVE-2025-68121 |
CWE-295 | High | 76.1-6.el9_2, 101.4-4.el8_10, 132.2-6.el9_6, 134.1-6.el10_0, 149-4.el9_7, 149-5.el10_1 | 23.02.2026 |
SB2026022333 SB2026030334 SB2026030343 and 116 more |
||
| #VU121565 - Resource exhaustion CVE-2025-65637 |
CWE-400 | Medium | 46.3-5.el8_6, 46.3-6.el9_0, 75-6.el8_8, 76.1-4.el9_2 | 15.01.2026 |
SB2026011525 SB20260116132 SB2026011920 and 35 more |
||
| #VU119235 - Resource exhaustion CVE-2025-61729 |
CWE-400 | Medium | 28.7-5.el8_4, 46.3-6.el8_6, 46.3-7.el9_0, 75-7.el8_8, 76.1-5.el9_2, 101.3-4.el9_4, 101.4-3.el8_10, 132.2-5.el9_6, 134.1-5.el10_0, 149-4.el9_7, 149-5.el10_1 | 06.12.2025 |
SB2025120604 SB20251210172 SB20251210173 and 146 more |
Showing elements 1 - 20 out of 33