RHSA-2026:35111
Advisory lineage Upstream: 6 Downstream: 0
Published: 03 Jul 2026, 10:13
Last modified:20 Jul 2026, 10:12
Vulnerability Summary
Overall Risk (default)
medium
35/100 CVSS Score
8.8 HIGH
3.1 (osv_red_hat)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
03 Jul 2026, 10:13
Published
Vulnerability first disclosed
20 Jul 2026, 10:12
Last Modified
Vulnerability information updated
Description
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVSS Metrics
- v3.1•HIGH•Score: 8.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected Systems
- redhat•trivy
< 0:0.72.0-0.1.hum1
References (38)
- https://access.redhat.com/errata/RHSA-2026:35111
- https://access.redhat.com/security/cve/CVE-2026-46680
- https://access.redhat.com/security/cve/CVE-2026-47262
- https://access.redhat.com/security/cve/CVE-2026-53488
- https://access.redhat.com/security/updates/classification/
- https://images.redhat.com/
- https://access.redhat.com/security/cve/CVE-2026-50195
- https://access.redhat.com/security/cve/CVE-2026-32285
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_35111.json
- https://bugzilla.redhat.com/show_bug.cgi?id=2451846
- https://www.cve.org/CVERecord?id=CVE-2026-32285
- https://nvd.nist.gov/vuln/detail/CVE-2026-32285
- https://github.com/buger/jsonparser/issues/275
- https://github.com/golang/vulndb/issues/4514
- https://pkg.go.dev/vuln/GO-2026-4514
- https://bugzilla.redhat.com/show_bug.cgi?id=2496104
- https://www.cve.org/CVERecord?id=CVE-2026-46680
- https://nvd.nist.gov/vuln/detail/CVE-2026-46680
- https://github.com/containerd/containerd/security/advisories/GHSA-fqw6-gf59-qr4w
- https://bugzilla.redhat.com/show_bug.cgi?id=2496126
- https://www.cve.org/CVERecord?id=CVE-2026-47262
- https://nvd.nist.gov/vuln/detail/CVE-2026-47262
- https://github.com/containerd/containerd/security/advisories/GHSA-jpcc-p29g-p8mq
- https://bugzilla.redhat.com/show_bug.cgi?id=2496128
- https://www.cve.org/CVERecord?id=CVE-2026-50195
- https://nvd.nist.gov/vuln/detail/CVE-2026-50195
- https://github.com/containerd/containerd/security/advisories/GHSA-cvxm-645q-p574
- https://bugzilla.redhat.com/show_bug.cgi?id=2495815
- https://www.cve.org/CVERecord?id=CVE-2026-53488
- https://nvd.nist.gov/vuln/detail/CVE-2026-53488
- https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp
- https://access.redhat.com/security/cve/CVE-2026-44740
- https://bugzilla.redhat.com/show_bug.cgi?id=2483894
- https://www.cve.org/CVERecord?id=CVE-2026-44740
- https://nvd.nist.gov/vuln/detail/CVE-2026-44740
- https://github.com/go-git/go-billy/releases/tag/v5.9.0
- https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1
- https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6