What’s Vulnerable › Products

Red Hat OpenShift Source-to-Image (S2I) vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Red Hat OpenShift Source-to-Image (S2I) version is affected

Latest Red Hat OpenShift Source-to-Image (S2I) vulnerabilities

• CVE-2026-114236 — Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers (CVSS 3.3)
• CVE-2026-107174 — Source-to-image: source-to-image: security boundary bypass via absolute symbolic link extraction (CVSS 6.4)
• CVE-2024-3727 — Containers/image: digest type does not guarantee valid type (CVSS 8.3)