Red Hat OpenShift Source-to-Image (S2I)

• CVE-2026-114236 Low 3.3 Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers 0.1%
• CVE-2026-107174 Medium 6.4 Source-to-image: source-to-image: security boundary bypass via absolute symbolic link extraction 0.3%