https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 07:13:15 +0000 https://vulnerability.circl.lu/vuln/cve-2026-101295 <p><strong>Affected:</strong> Red Hat Assisted Installer for Red Hat OpenShift Container Platform 2, Red Hat OpenShift Container Platform 4</p> <p>Path traversal / arbitrary file write in oc-mirror&#39;s operator catalog image extraction. When mirroring operator catalogs using either the legacy v1 path (--v1) or the OCI feature path (--use-oci-feature), oc-mirror extracts tar entries from catalog image layers without validating that file paths resolve within the intended destination directory.</p> <p><strong>Affected:</strong> Red Hat Assisted Installer for Red Hat OpenShift Container Platform 2, Red Hat OpenShift Container Platform 4</p> <p>Path traversal / arbitrary file write in oc-mirror&#39;s operator catalog image extraction. When mirroring operator catalogs using either the legacy v1 path (--v1) or the OCI feature path (--use-oci-feature), oc-mirror extracts tar entries from catalog image layers without validating that file paths resolve within the intended destination directory.</p> https://vulnerability.circl.lu/vuln/cve-2026-101295