Known vulnerabilities in puppet-tripleo (Red Hat package)

Vendor: Red Hat Inc.
Software: puppet-tripleo (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:puppet-tripleo_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting puppet-tripleo (Red Hat package) puppet-tripleo (Red Hat package) is affected by 7 known vulnerabilities: 1 high, 4 medium, 2 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140607 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-32282		 CWE-367 Low
No
No
 14.2.3-17.1.20260206090839.40278e1.el9ost 31.07.2026 SB2026073125
SB2026073160
SB2026073161
and 51 more
#VU140599 - Resource exhaustion
CVE-2026-32280		 CWE-400 Medium
No
No
 14.2.3-17.1.20260206090839.40278e1.el9ost 31.07.2026 SB2026073125
SB2026073160
SB2026073161
and 75 more
#VU136680 - Dependency on Vulnerable Third-Party Component
CVE-2026-32283		 CWE-1395 Medium
No
No
 14.2.3-17.1.20260206090839.40278e1.el9ost 02.07.2026 SB2026070218
SB2026070239
SB2026070240
and 63 more
#VU124118 - Improper input validation
CVE-2026-25679		 CWE-20 Medium
No
No
 14.2.3-17.1.20260206090839.40278e1.el9ost 19.03.2026 SB2026031903
SB2026031904
SB2026031905
and 136 more
#VU124034 - Resource exhaustion
CVE-2025-61726		 CWE-400 Medium
No
No
 14.2.3-17.1.20260206090839.40278e1.el9ost 16.03.2026 SB2026031636
SB2026031637
SB2026031638
and 144 more
#VU123129 - Improper Certificate Validation
CVE-2025-68121		 CWE-295 High
No
No
 14.2.3-17.1.20260206090839.40278e1.el9ost 23.02.2026 SB2026022333
SB2026030334
SB2026030343
and 118 more
#VU122995 - Allocation of Resources Without Limits or Throttling
CVE-2026-24708		 CWE-770 Low
No
No
 14.2.3-17.1.20260206090839.40278e1.el9ost 17.02.2026 SB2026021762
SB2026021847
SB2026022004
and 2 more