Red Hat Red Hat Advanced Cluster Security 4

• CVE-2026-114236 Low 3.3 Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers 0.1%
• CVE-2026-19519 Medium 4.3 Claircore: claircore: denial of service via unchecked type assertion in rpm header parser 0.4%
• CVE-2026-19278 Medium 6.8 Stackrox: stackrox: privilege escalation via unanchored regular expressions in auth m2m role mappings 0.3%
• CVE-2026-10079 High 8.5 Stackrox: stackrox: deploy-time policy enforcement and visibility bypass via label injection 0.2%
• CVE-2026-16254 Medium 4.3 Claircore: claircore: denial of service via out-of-bounds slice in claircore's apk installed-database parser 0.4%
• CVE-2026-9165 High 7.7 Stackrox: stackrox: unbounded graphql query depth allows authenticated denial of service 0.5%
• CVE-2025-11065 Medium 5.3 Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure 0.5%
• CVE-2025-8556 Low 3.7 Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results 0.5%
• CVE-2025-5198 Medium 5.0 Stackrox: xss in stackrox 0.3%
• CVE-2024-11831 Medium 5.4 Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript 1.1%
• CVE-2024-0406 Medium 6.1 Mholt/archiver: path traversal vulnerability 0.9%