A high-severity vulnerability (CVE-2026-113722) affects multiple specific versions of the python-virtualenv tool, which is used for creating isolated Python environments. The vulnerability has a CVSS 3.1 score of 7.8, indicating significant impact on confidentiality, integrity, and availability. The affected versions include various releases from 1.10.1-1 through 15.1.0+ds-2build1. No public exploit code or known exploitation in the wild has been reported. No patch or remediation information is provided in the available data.
A medium severity vulnerability (CVE-2026-113721) affects multiple specific versions of the python-virtualenv tool, which is used to create isolated Python environments. The vulnerability has a CVSS 3.1 score of 4.5, indicating limited impact with low privileges required and no user interaction needed. The affected versions include various Debian and Ubuntu package builds. No public exploit or known active exploitation is reported. No patch or remediation details are provided in the available data.
CVE-2026-113720 is a medium severity vulnerability in python-virtualenv, a tool for creating isolated Python environments. The vulnerability affects multiple specific versions of python-virtualenv. The CVSS 4.0 score is 4.4, indicating a low to medium impact with local attack vector, high attack complexity, and partial privileges required. No public exploits or patches are currently documented.
A medium-severity vulnerability (CVE-2026-113719) affects specific versions of the Python virtualenv tool, which is used to create isolated Python environments. The vulnerability has a CVSS 3.1 base score of 4.5, indicating limited impact on confidentiality, integrity, and availability. It requires local access with low privileges and high attack complexity, with no user interaction needed. The affected versions include multiple specific package builds primarily associated with Ubuntu distributions. No public exploits or known active exploitation have been reported. No patch or remediation information is provided in the source data.
CVE-2026-113718 is a high-severity vulnerability affecting multiple specific versions of the python-virtualenv tool, which is used to create isolated Python environments. The vulnerability has a CVSS 4.0 base score of 7.1, indicating significant impact with local attack vector, high complexity, and partial user interaction required. The flaw affects a range of versions including various Debian and Ubuntu package builds. No public exploit or patch information is currently provided.
CVE-2026-113717 is a low-severity vulnerability affecting specific versions of the python-virtualenv tool, which is used to create isolated Python environments. The vulnerability has a CVSS 4.0 base score of 2.3, indicating limited impact and requiring high attack complexity and partial user interaction for exploitation. No public exploits or known active exploitation have been reported. The affected versions include multiple specific package builds primarily associated with Ubuntu distributions.
CVE-2026-113716 is a medium severity vulnerability in python-virtualenv, a tool for creating isolated Python environments. It affects multiple specific package versions. The vulnerability has a CVSS 3.1 base score of 4.5, indicating limited impact on confidentiality, integrity, and availability. No public exploits or vendor patches are currently documented.
CVE-2026-113715 is a low severity vulnerability affecting specific versions of the python-virtualenv tool, which is used to create isolated Python environments. The CVSS 4.0 score is 2.0, indicating low impact with local attack vector, high attack complexity, and partial privileges required. No public exploit or known active exploitation is reported. The affected versions include various specific package builds primarily for Ubuntu distributions.
CVE-2026-113714 is a low severity vulnerability affecting multiple specific versions of the python-virtualenv tool, which is used to create isolated Python environments. The vulnerability has a CVSS 4.0 base score of 2.3, indicating limited impact and complexity. No known exploits in the wild have been reported, and no patch or remediation details are provided in the available data.
Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container
Platform 4.22.18. See the following advisory for the RPM packages for this
release:
https://access.redhat.com/errata/RHSA-2026:79150
Space precludes documenting all of the container images in this advisory.
See the following Release Notes documentation, which will be updated
shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html/release_notes/
Security Fix(es):
* kernel: futex: Fix race on the initial mm->futex.phash.ref allocation
(CVE-2026-80775)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
All OpenShift Container Platform 4.22 users are advised to upgrade to these
updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift CLI (oc)
or web console. Instructions for upgrading a cluster are available at
https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html-single/updating_clusters/index#updating-cluster-cli.
Vite versions from 8.2.0 up to but not including 8.2.4 and version 8.3.3 have a vulnerability where the first 4 bytes of files outside the configured server.fs directory can be exposed to the browser. This occurs when a request includes the ?vite-wasm-instance query, which bypasses server.fs path checks and causes an error revealing file content. The issue is fixed in versions 8.2.4 and 8.3.3.
Vite versions prior to 6.4.4, 7.3.7, 8.1.6, 8.2.4, and 8.3.3 have a vulnerability in import analysis where a root-relative browser URL can be recorded in safeModulePaths instead of the cleaned resolved module identifier. This can allow a network-accessible, non-Windows development server to authorize raw filesystem requests for certain host files outside the project root, potentially disclosing files. The vulnerability does not allow arbitrary path traversal and is fixed in the specified versions.
Vite versions prior to 6.4.4, 7.3.7, 8.1.6, 8.2.4, and 8.3.3 have a vulnerability affecting applications using custom middleware that pass an unchanged browser request URL to server.transformIndexHtml. This flaw allows an attacker to craft a development-server page that causes the victim's browser to fetch and execute an attacker-controlled module, potentially exposing sensitive page data or enabling critical actions. The issue is fixed in the specified versions.
HarfBuzz versions 8.0.0 through 14.6.0 contain an out-of-bounds write vulnerability. This flaw could allow an attacker with local access and high attack complexity to cause a high impact on confidentiality, integrity, and availability. The vulnerability requires user interaction and does not involve privileges. It is rated as high severity with a CVSS score of 7. No public exploits or vendor patch information are provided in the data.
Python filelock is a platform-independent file locking library. A low severity vulnerability (CVE-2026-112941) affects multiple specific versions of python-filelock. The issue has a CVSS score of 3.3, indicating low impact, with limited integrity impact and no confidentiality or availability impact reported.
Python filelock is a platform-independent file locking library. A vulnerability identified as CVE-2026-112940 affects multiple specific versions of python-filelock. The vulnerability has a CVSS v3.1 score of 7.1, indicating high severity, with impact on integrity and availability but no confidentiality impact. No public exploits or vendor patch information are provided.
Python filelock, a platform-independent file locking library, has a vulnerability identified as CVE-2026-112939. The flaw affects multiple specific versions of the python-filelock package. The vulnerability has a medium severity rating with a CVSS score of 4.7, indicating limited impact. It requires local access with high attack complexity and low privileges, and it can cause integrity issues without affecting confidentiality or availability.
Python filelock versions including 2.0.11-1 through 3.32.2-1 contain a vulnerability identified as CVE-2026-112937. The flaw impacts the integrity of the file locking mechanism without affecting confidentiality. It has a medium severity score of 6.1. No public exploits or cloud service implications are reported.
Python filelock is a platform-independent file locking library. A vulnerability identified as CVE-2026-112936 affects multiple specific versions of python-filelock. The CVSS score is 6.1, indicating a medium severity issue with local attack vector, low complexity, requiring low privileges, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and low availability impact.
A medium severity vulnerability (CVE-2026-112935) affects the python-filelock package, a platform-independent file lock implementation for Python. The flaw impacts multiple specific versions of python-filelock. The CVSS score is 4.7, indicating limited attack vector and complexity but with potential integrity impact. No public exploits or cloud service involvement are reported.