Product by Red Hat
Openshift Serverless
17 known vulnerabilities in Openshift Serverless (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
17
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-1635 | Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol | 7.5 | |
| High | CVE-2024-1394 | Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads | 7.5 | |
| High | CVE-2024-3884 | Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded | 7.5 | |
| High | CVE-2024-3727 | Containers/image: digest type does not guarantee valid type | 8.3 | |
| Medium | CVE-2024-1023 | Io.vertx/vertx-core: memory leak due to the use of netty fastthreadlocal data structures in vertx | 6.5 | |
| Medium | CVE-2024-3653 | Undertow: learningpushhandler can lead to remote memory dos attacks | 5.3 | |
| High | CVE-2026-87743 | Quarkus-vertx-http: authorization bypass via path normalization discrepancy in quarkus http security | 7.5 | |
| Critical | CVE-2025-10894 | Nx: nx/devkit: malicious versions of nx and plugins published to npm | 9.6 | |
| Medium | CVE-2024-11831 | Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript | 5.4 | |
| High | CVE-2023-6291 | Keycloak: redirect_uri validation bypass | 7.1 | |
| Medium | CVE-2024-9355 | Golang-fips: golang fips zeroed buffer | 6.5 | |
| Medium | CVE-2026-107174 | Source-to-image: source-to-image: security boundary bypass via absolute symbolic link extraction | 6.4 | |
| Medium | CVE-2024-1300 | Io.vertx:vertx-core: memory leak when a tcp server is configured with tls and sni support | 5.4 | |
| High | CVE-2023-3089 | Ocp & fips mode | 7.0 | |
| Medium | CVE-2024-12401 | Cert-manager: potential dos when parsing specially crafted pem inputs | 4.4 | |
| Medium | CVE-2023-5675 | Quarkus-resteasy-reactive: Improper Authorization | 6.5 | |
| Low | CVE-2025-8556 | Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results | 3.7 |