Product by Red Hat

    Openshift Serverless

    17 known vulnerabilities in Openshift Serverless (Red Hat), 0 of them actively exploited (CISA KEV).

    Key figures

    17

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Openshift Serverless (Red Hat)
    HighCVE-2024-1635

    Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol

    also in 35 other products

    7.5
    HighCVE-2024-1394

    Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads

    also in 33 other products

    7.5
    HighCVE-2024-3884

    Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded

    also in 32 other products

    7.5
    HighCVE-2024-3727

    Containers/image: digest type does not guarantee valid type

    also in 24 other products

    8.3
    MediumCVE-2024-1023

    Io.vertx/vertx-core: memory leak due to the use of netty fastthreadlocal data structures in vertx

    also in 20 other products

    6.5
    MediumCVE-2024-3653

    Undertow: learningpushhandler can lead to remote memory dos attacks

    also in 22 other products

    5.3
    HighCVE-2026-87743

    Quarkus-vertx-http: authorization bypass via path normalization discrepancy in quarkus http security

    also in 10 other products

    7.5
    CriticalCVE-2025-10894

    Nx: nx/devkit: malicious versions of nx and plugins published to npm

    also in 3 other products

    9.6
    MediumCVE-2024-11831

    Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript

    also in 38 other products

    5.4
    HighCVE-2023-6291

    Keycloak: redirect_uri validation bypass

    also in 22 other products

    7.1
    MediumCVE-2024-9355

    Golang-fips: golang fips zeroed buffer

    also in 30 other products

    6.5
    MediumCVE-2026-107174

    Source-to-image: source-to-image: security boundary bypass via absolute symbolic link extraction

    also in 3 other products

    6.4
    MediumCVE-2024-1300

    Io.vertx:vertx-core: memory leak when a tcp server is configured with tls and sni support

    also in 21 other products

    5.4
    HighCVE-2023-3089

    Ocp & fips mode

    also in 10 other products

    7.0
    MediumCVE-2024-12401

    Cert-manager: potential dos when parsing specially crafted pem inputs

    also in 7 other products

    4.4
    MediumCVE-2023-5675

    Quarkus-resteasy-reactive: Improper Authorization

    also in 10 other products

    6.5
    LowCVE-2025-8556

    Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results

    also in 21 other products

    3.7

    All products by Red Hat