Known vulnerabilities in Red Hat OpenShift GitOps

Software CPE: cpe:2.3:a:red_hat:red_hat_openshift_gitops:*:*:*:*:*:*:*:*
Total vulnerabilities: 241
Public exploits: 21
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenShift GitOps Red Hat OpenShift GitOps is affected by 241 known vulnerabilities: 60 high, 133 medium, 48 low Critical High Medium Low

Vulnerabilities (241)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140611 - Double Free
CVE-2026-33811
CWE-415 Medium
No
No
1.21.1 31.07.2026 SB2026073126
SB20260731121
SB20260731123
and 13 more
#VU120232 - Uncontrolled Recursion
CVE-2025-68156
CWE-674 Medium
No
No
1.17.4, 1.18.3 22.12.2025 SB2025122249
SB2025122250
SB2025122251
and 12 more
#VU119967 - Incorrect Privilege Assignment
CVE-2025-13888
CWE-266 Medium
No
No
1.16.5, 1.17.3, 1.18.2, 1.18.3 15.12.2025 SB2025121635
SB2025121636
SB2025121637
and 1 more
#VU119235 - Resource exhaustion
CVE-2025-61729
CWE-400 Medium
No
No
1.17.4, 1.18.3 06.12.2025 SB2025120604
SB20251210172
SB20251210173
and 146 more
#VU118717 - Improper input validation
CVE-2025-47913
CWE-20 Low
No
No
1.17.4, 1.18.3 24.11.2025 SB2025112448
SB2025112455
SB2025112456
and 53 more
#VU118190 - Resource exhaustion
CVE-2025-58183
CWE-400 Medium
No
No
1.17.4, 1.18.3 07.11.2025 SB2025110705
SB2025110725
SB2025110726
and 177 more
#VU116609 - Use After Free
CVE-2025-49844
CWE-416 Medium
Available
No
1.16.5, 1.17.3, 1.18.2 06.10.2025 SB2025100629
SB2025100633
SB2025100709
and 56 more
#VU115167 - Allocation of Resources Without Limits or Throttling
CVE-2025-58754
CWE-770 Medium
Available
No
1.17.4 12.09.2025 SB2025091204
SB2025100104
SB2025100912
and 51 more
#VU114886 - Exposure of sensitive information to an unauthorized actor
CVE-2025-55190
CWE-200 Medium
No
No
1.17.4, 1.18.3 05.09.2025 SB2025090543
SB2026021732
SB2026021733
#VU104099 - Use After Free
CVE-2024-56171
CWE-416 High
No
No
1.16.1 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU104098 - Stack-based buffer overflow
CVE-2025-24928
CWE-121 High
No
No
1.16.1 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU103687 - Memory corruption
CVE-2025-0395
CWE-119 Medium
No
No
1.16.1 06.02.2025 SB2025020664
SB2025020667
SB2025020668
and 66 more
#VU102739 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-12747
CWE-362 Low
No
No
1.16.1 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 56 more
#VU102736 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12088
CWE-22 Medium
No
No
1.16.1 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 65 more
#VU102734 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12087
CWE-22 Medium
No
No
1.16.1 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 74 more
#VU101868 - Resource exhaustion
CVE-2024-45338
CWE-400 Medium
No
No
1.16.5, 1.17.3 19.12.2024 SB2024121932
SB2024123101
SB2025010619
and 137 more
#VU101777 - Improper Authorization
CVE-2024-45337
CWE-285 Medium
Available
No
1.16.5, 1.17.3, 1.18.2 13.12.2024 SB2024121332
SB2024121333
SB2024121334
and 93 more
#VU80575 - Improper input validation
CVE-2023-39322
CWE-20 Medium
No
No
1.15.3 08.09.2023 SB2023090845
SB2023091875
SB2023091876
and 51 more
#VU80574 - Improper input validation
CVE-2023-39321
CWE-20 Medium
No
No
1.15.3 08.09.2023 SB2023090845
SB2023091875
SB2023091876
and 52 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023
CWE-79 Low
Available
Exploited
1.16.1 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more


Showing elements 1 - 20 out of 241