Red Hat Red Hat Trusted Artifact Signer

• CVE-2025-11065 Medium 5.3 Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure 0.5%
• CVE-2025-4574 Medium 6.5 Crossbeam-channel: crossbeam-channel vulnerable to double free on drop 0.6%
• CVE-2025-4432 Medium 5.3 Ring: some aes functions may panic when overflow checking is enabled in ring 1.0%
• CVE-2025-3416 Low 3.7 Rust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch` 0.5%
• CVE-2024-11738 Medium 5.3 Rustls: rustls network-reachable panic in `acceptor::accept` 0.7%