<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: red-hat-openshift-dev-spaces</title><description>Every new CVE for red-hat-openshift-dev-spaces.</description><link>https://agentprime.io/</link><item><title>CVE-2026-107912: Io.quarkus/quarkus-vertx-http: quarkus-vertx-http: authorization bypass in management interface via path concatenation flaw</title><link>https://agentprime.io/advisories/CVE-2026-107912/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-107912/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 05 Nov 2026 13:27:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-114236: Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers</title><link>https://agentprime.io/advisories/CVE-2026-114236/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-114236/</guid><description>CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 21 Oct 2026 08:04:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-107935: Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose</title><link>https://agentprime.io/advisories/CVE-2026-107935/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-107935/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 09 Oct 2026 09:05:43 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-91142: Cockpit: cockpit: unauthorized modification of login records via integer overflow</title><link>https://agentprime.io/advisories/CVE-2026-91142/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-91142/</guid><description>CVSS 3.6 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 16:44:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-91147: Cockpit: cockpit: denial of service in `cockpit-ws` due to url-root handling without a trailing slash</title><link>https://agentprime.io/advisories/CVE-2026-91147/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-91147/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 16:43:51 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-91149: Cockpit: cockpit: denial of service via unbounded connection thread spawning</title><link>https://agentprime.io/advisories/CVE-2026-91149/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-91149/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 16:43:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-11395: Podman: arbitrary file write when importing oci archive</title><link>https://agentprime.io/advisories/CVE-2025-11395/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-11395/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Sep 2026 22:59:03 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-79699: Podman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directory</title><link>https://agentprime.io/advisories/CVE-2026-79699/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-79699/</guid><description>CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Sep 2026 16:25:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-79705: Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers</title><link>https://agentprime.io/advisories/CVE-2026-79705/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-79705/</guid><description>CVSS 4.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Sep 2026 16:23:26 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-76235: Cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via cockpitlang cookie in send_login_html</title><link>https://agentprime.io/advisories/CVE-2026-76235/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-76235/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 19 Aug 2026 12:44:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-57850: Codeready-ws: privilege escalation via excessive /etc/passwd permissions</title><link>https://agentprime.io/advisories/CVE-2025-57850/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-57850/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 02 Dec 2025 18:53:35 GMT</pubDate><category>CVE</category></item></channel></rss>