Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-66506

27
FAUCET Score

CVE-2025-66506 is a denial-of-service vulnerability affecting Fulcio, a certificate authority for OpenID Connect (OIDC) code signing, specifically in versions prior to 1.8.3. A malicious OIDC identity token with numerous period characters can cause excessive memory allocation, leading to a denial of service. This vulnerability has a CVSS score of 7.5 (HIGH), indicating a network-based attack with low complexity and high availability impact. There is no evidence of active exploitation, public exploit code, or significant community discussion beyond a single GitHub mention.

Impacted Technologies

VendorProductVersion(s)CPE
< 1.8.3CPE matchmatch criteria
cpe:2.3:a:linuxfoundation:fulcio:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.5HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.19%
Probability of exploitation in next 30 days
EPSS Percentile
9.0%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0019 is in the 1st percentile among its peer group of 51,551 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (140)

gopatch availablevia ghsa
Product: github.com/sigstore/fulcioFixed in: 1.8.3
redhatpatch availablevia redhat_api
Product: OpenShift Security Profiles Operator 1Fixed in: compliance/openshift-security-profiles-operator-bundle:sha256:4604d631307390e44fea4729d87470a32f294f380b4c7c9448a8e1a82ccec5b7
View patch
redhatpatch availablevia redhat_api
Product: OpenShift Security Profiles Operator 1Fixed in: compliance/openshift-security-profiles-rhel8-operator:sha256:66c78e05a610eb31b8a350502b778305e53da9576ae124a3eb7ab3cc29595297
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.8Fixed in: advanced-cluster-security/rhacs-main-rhel8:sha256:f96217aeff1a39024700537986dca70ce7e94949c91c3da815dc715ef6588044
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.9Fixed in: advanced-cluster-security/rhacs-main-rhel8:sha256:01d01a649ed0c466925ebdfc7e632c7c01f0e59ef5d764d2f2dcf51f355b68ec
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.9Fixed in: advanced-cluster-security/rhacs-rhel8-operator:sha256:d9c49f3d6b2d8ec68784c59bf75810bd4290f4118eb7e512fd6150193600abc4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.9Fixed in: advanced-cluster-security/rhacs-roxctl-rhel8:sha256:baa02b25c952aa9e463fdd8bde3ae196621ca09cabd508b9638a82c528b6acda
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.9Fixed in: advanced-cluster-security/rhacs-scanner-v4-rhel8:sha256:a3cfe3a06fadbe73d8a12e84beb504c9204e34f52af459c30d4e72a2b0a411e3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.9Fixed in: advanced-cluster-security/rhacs-main-rhel8:sha256:25bb4a371c5656d01a53060df46b7fbb5a287fe843c08581be69fb42ff5ec5dd
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.9Fixed in: advanced-cluster-security/rhacs-rhel8-operator:sha256:9fd9a15845c8e2b663c502a15efb17f2bc3b3555eb513a7972ffe71f37654b9e
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.9Fixed in: advanced-cluster-security/rhacs-roxctl-rhel8:sha256:52db816d2bddde50796a4a5ceb22a9a54fc72bd3b2c1564e7515d0cda2f6c0c1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.9Fixed in: advanced-cluster-security/rhacs-scanner-v4-rhel8:sha256:b57d042b045f2600dbd6e446c0c651b1ae0a85158077bd52cd0b76616bb95230
View patch
redhatpatch availablevia redhat_api
Product: Red Hat AI Inference Server 3.2Fixed in: rhaiis/model-opt-cuda-rhel9:sha256:fca12d55fef49b9a67c8aa7c2c004adb8916b9784134b4e571067a615a7a4a2e
View patch
redhatpatch availablevia redhat_api
Product: Red Hat AI Inference Server 3.2Fixed in: rhaiis/vllm-cuda-rhel9:sha256:7b04c0154c486aa7dd103ddeaf6bea7b9851859c33a4b979a85261a44a7b77f2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat AI Inference Server 3.2Fixed in: rhaiis/vllm-rocm-rhel9:sha256:e3b3efcdd86f60b90664a249d45918b2ac5f45bae5eed5399e310d63e878b287
View patch
redhatpatch availablevia redhat_api
Product: Red Hat AI Inference Server 3.2Fixed in: rhaiis/vllm-tpu-rhel9:sha256:64796b48c68d31973a08e22c9530c39b1bc3ba9f376bbefa57643ef0fc857534
View patch
redhatpatch availablevia redhat_api
Product: Red Hat AI Inference Server 3.2Fixed in: rhaiis/vllm-rocm-rhel9:sha256:c5efe40fa2a6e98d7d3d6676befff0dbbd87b2887769bb7e5856c5b0b0ada125
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-llama-stack-core-rhel9:sha256:4f3e402082fd9064ef612b4306ba1da62f7b142d82b0f184b4b6ad65540927a9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-ml-pipelines-runtime-generic-rhel9:sha256:93436f429cc5fd089a464f22ed51a00505db398fe90c02565c83a6f72f265f45
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-model-registry-job-async-upload-rhel9:sha256:d4d70a9fd8dcea2315b29ea36c085b6a37bd317fb7df6688993f4e7b62a2a47e
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-must-gather-rhel9:sha256:314e3ae61356b86a365bace1060f7cd6013e46ff88dace6bb2b61c281c287827
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9:sha256:7a354b91b17b33b26c57c3b8a90747c31569bb7c40ce473534a5ba5f173d7322
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9:sha256:c35c95fa0511503853770594040357cba04649739f4a61f862f6ac4de8b636eb
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9:sha256:0780f52efa6c68ea2fb6371edfbd8b703157c38911803985bb1a676c84e073b5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9:sha256:a202c9ec6be34c4be1793e4f9f348077f345c450e0fcd04071d5092f266df9b4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9:sha256:e18d2d006c8cd4e3d3816540e154f421e7550a96f73901a799c15a5b4fe576db
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9:sha256:fa2b62d5001452ad077383bc63124f021bbef766fb104203a9a05bba87332d8e
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9:sha256:3bdeae6f78230e1d966cf7a3f35ea821c808f40cc4c2abb7af9b1748f5611826
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-vllm-cuda-rhel9:sha256:78ccc2cef82e18943e3d9f3433597a77c3430814ab9f042c5b2a9e907049f8de
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-vllm-rocm-rhel9:sha256:7cf5a595faf09636baa94db52be028d4d4d1e2be0fc4748d276719387b2de3b4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9:sha256:2b6b580b98ece481ae56d3106d1f555502482e158747dbfa696f5b8b01e69732
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9:sha256:62a04dfef095c14dcf8ae37af42f49ad410d0525eb47c509d53c0469cdf09b8c
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9:sha256:7ea4b2d6a2da83adf6680f65621575c4cae8ac246d52c6a59c1bebc6d7c73295
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9:sha256:47ebda63b857cae1475cb195d372db7a7a4ee729d286e1da386bdf5972d81482
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9:sha256:158c783d59cdbdb9028c4dd760632edd7295330b5dcebbe0017bff4089635c3a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9:sha256:fbe346eafcfbb867f595cbad5ea0190fabbabc61ad80a4be2265e0e2b0149f68
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9:sha256:fec8bf2d539fd00df8854a723bae98b7e173c43153c3132ba459bc0e9a86ae35
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9:sha256:b19482e4008ac03a39b432fb3056bb1ab372ef1617df5bbfe784bc2910b6827a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9:sha256:1213d9e9a56ec3fddb887082d95c2ac168876eee8592aba265aeadd7ffad3898
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9:sha256:85abac79e8d09b61a9fffb0b5d3fd2a3f9da65bad9573a72cecb878a81357dcf
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9:sha256:b14e6b2a5f4b66dacfcd6c336e2a9e057b1d3ce7de902f0090d9a150a8292a84
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-ml-pipelines-runtime-generic-rhel9:sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-model-registry-job-async-upload-rhel9:sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Pipelines 1.21.0Fixed in: openshift-pipelines/pipelines-operator-bundle:sha256:a5672822c8a59e50317d79a697d7e93c9fca27df13dcbd999c3c7a18475243a2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3.1Fixed in: quay/quay-rhel8:sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3.12Fixed in: quay/quay-rhel8:sha256:117876c6c6a12beb25983da60c8c1628f350a1797888b9f03c44b9dd737844fa
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3.15Fixed in: quay/quay-rhel8:sha256:a8daa359ab7a0bc9722b25fb87aa6fd253506632640bfe7f31c9c92868421ecb
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3.9Fixed in: quay/quay-rhel8:sha256:8bd901f9d03817e599a73b4f4355236320bec1b803bd9507383277f27fde4319
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Trusted Artifact Signer 1.2Fixed in: rhtas/cosign-rhel9:sha256:8efb2c8f77e91d7a15063ddc6f7eca1226a494f0f9340590af6e3a2eb9c462c3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Trusted Artifact Signer 1.2Fixed in: rhtas/gitsign-rhel9:sha256:4c59990381ce313cd845257e95fd2e910b3d84459c5b3c3aa09fce954a328101
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Trusted Artifact Signer 1.2Fixed in: rhtas/client-server-rhel9:sha256:47071a0613d6d262110af4ce6703ce99db72c7ab58e3a6051b82f3098b372a49
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Trusted Artifact Signer 1.3Fixed in: rhtas/cosign-rhel9:sha256:a8289d488491991d454a32784de19476f2c984917eb7a33b4544e55512f2747c
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Trusted Artifact Signer 1.3Fixed in: rhtas/gitsign-rhel9:sha256:3c39718e61d13648afcb5b0f5741aa771caf9b2f8c52e4af9dfa0635d5b05894
View patch
redhatpatch availablevia redhat_api
Product: Network Observability (NETOBSERV) 1.11.0Fixed in: network-observability/network-observability-cli-rhel9:sha256:0c677aebfafea3f13c298396e9975da6fb392df0cef1b62df54d66b0f08376a3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Trusted Artifact Signer 1.3Fixed in: rhtas/fulcio-rhel9:sha256:d876a5e41b8467cdde921032f2cd53e77bef99ebcd8b61d72a3ad411469ad352
View patch
redhatno patchvia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/must-gather-rhel8
redhatno patchvia redhat_api
Product: Assisted Installer for Red Hat OpenShift Container Platform 2Fixed in: rhai/assisted-installer-controller-rhel9
redhatno patchvia redhat_api
Product: Compliance OperatorFixed in: compliance/openshift-compliance-must-gather-rhel8
redhatno patchvia redhat_api
Product: Confidential Compute AttestationFixed in: openshift-sandboxed-containers/osc-must-gather-rhel9
redhatno patchvia redhat_api
Product: Confidential Compute AttestationFixed in: openshift-sandboxed-containers/osc-podvm-builder-rhel9
redhatno patchvia redhat_api
Product: File Integrity OperatorFixed in: compliance/openshift-compliance-must-gather-rhel8
redhatno patchvia redhat_api
Product: Kernel Module Management Operator for Red Hat OpenshiftFixed in: kmm/kernel-module-management-must-gather-rhel9
redhatno patchvia redhat_api
Product: Migration Toolkit for ContainersFixed in: rhmtc/openshift-migration-controller-rhel8
redhatno patchvia redhat_api
Product: Migration Toolkit for ContainersFixed in: rhmtc/openshift-migration-log-reader-rhel8
redhatno patchvia redhat_api
Product: Migration Toolkit for ContainersFixed in: rhmtc/openshift-migration-must-gather-rhel8
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-secrets-store-csi-mustgather-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-tools-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ptp-must-gather-rhel9
redhatno patchvia redhat_api
Product: Red Hat Openshift Data Foundation 4Fixed in: odf4/odf-cloudnative-pg-rhel9-operator
redhatno patchvia redhat_api
Product: Red Hat Openshift Data Foundation 4Fixed in: odf4/odf-must-gather-rhel9
redhatno patchvia redhat_api
Product: Multiarch Tuning OperatorFixed in: multiarch-tuning/multiarch-tuning-operator-bundle
redhatno patchvia redhat_api
Product: Multiarch Tuning OperatorFixed in: multiarch-tuning/multiarch-tuning-rhel9-operator
redhatno patchvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/assisted-installer-controller-rhel9
redhatno patchvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/must-gather-rhel9
redhatno patchvia redhat_api
Product: OpenShift API for Data ProtectionFixed in: oadp/oadp-mustgather-rhel9
redhatno patchvia redhat_api
Product: OpenShift API for Data ProtectionFixed in: oadp/oadp-velero-plugin-rhel8
redhatno patchvia redhat_api
Product: OpenShift API for Data ProtectionFixed in: oadp/oadp-velero-plugin-rhel9
redhatno patchvia redhat_api
Product: OpenShift Developer Tools and ServicesFixed in: ocp-tools-4/jenkins-agent-base-rhel8
redhatno patchvia redhat_api
Product: OpenShift Developer Tools and ServicesFixed in: ocp-tools-4/jenkins-agent-base-rhel9
redhatno patchvia redhat_api
Product: OpenShift Developer Tools and ServicesFixed in: ocp-tools-4/jenkins-rhel8
redhatno patchvia redhat_api
Product: OpenShift Developer Tools and ServicesFixed in: ocp-tools-4/jenkins-rhel9
redhatno patchvia redhat_api
Product: OpenShift Developer Tools and ServicesFixed in: openshift4/ose-jenkins
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines-client
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-chains-controller-rhel8
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-chains-controller-rhel9
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-cli-tkn-rhel8
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-cli-tkn-rhel9
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-opc-rhel9
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-operator-proxy-rhel8
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-operator-proxy-rhel9
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-operator-webhook-rhel8
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-rhel8-operator
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-rhel9-operator
redhatno patchvia redhat_api
Product: OpenShift ServerlessFixed in: openshift-serverless-1/kn-plugin-event-sender-rhel9
redhatno patchvia redhat_api
Product: OpenShift ServerlessFixed in: openshift-serverless-1/serverless-must-gather-rhel9
redhatno patchvia redhat_api
Product: Power monitoring for Red Hat OpenShiftFixed in: openshift-power-monitoring/power-monitoring-rhel9-operator
redhatno patchvia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/submariner-operator-bundle
redhatno patchvia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/submariner-rhel9-operator
redhatno patchvia redhat_api
Product: Red Hat Advanced Cluster Security 4Fixed in: advanced-cluster-security/rhacs-operator-bundle
redhatno patchvia redhat_api
Product: Red Hat AI Inference ServerFixed in: rhai/base-image-cpu-rhel9
redhatno patchvia redhat_api
Product: Red Hat AI Inference ServerFixed in: rhai/base-image-cuda-rhel9
redhatno patchvia redhat_api
Product: Red Hat AI Inference ServerFixed in: rhai/base-image-rocm-rhel9
redhatno patchvia redhat_api
Product: Red Hat AI Inference ServerFixed in: rhaiis/vllm-spyre-rhel9
redhatno patchvia redhat_api
Product: Red Hat Certification Program for Red Hat Enterprise Linux 9Fixed in: rhcertification/redhat-certification-baremetal
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: rhel10/buildah
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: rhel10-eus/rhel-10.0-bootc
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: rhel10-eus/rhel-10.0-bootc-image-builder
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: rhel10/podman
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: rhel10/rhel-bootc
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: rhel10/skopeo
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: ubi10/buildah
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: ubi10/podman
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: ubi10/skopeo
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: rhel9/buildah
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: rhel9-eus/rhel-9.6-bootc
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: rhel9-eus/rhel-9.6-bootc-image-builder
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: rhel9/rhel-bootc
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: rhel9/skopeo
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: ubi9/buildah
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: ubi9/skopeo
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI) 3Fixed in: rhelai3/bootc-aws-cuda-rhel9
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI) 3Fixed in: rhelai3/bootc-azure-cuda-rhel9
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI) 3Fixed in: rhelai3/bootc-cuda-rhel9
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI) 3Fixed in: rhelai3/bootc-gcp-cuda-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/cnf-tests-rhel8
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/cnf-tests-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/microshift-bootc-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/oc-mirror-plugin-rhel8
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/oc-mirror-plugin-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-csi-driver-shared-resource-mustgather-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-deployer
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-deployer-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-local-storage-mustgather-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-must-gather-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-operator-lifecycle-manager-rhel9
redhatend of lifevia redhat_api
Product: Migration Toolkit for VirtualizationFixed in: mtv-candidate/mtv-must-gather-rhel8
redhatend of lifevia redhat_api
Product: OpenShift LightspeedFixed in: openshift-lightspeed/lightspeed-service-api-rhel9
redhatend of lifevia redhat_api
Product: OpenShift LightspeedFixed in: openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9
redhatend of lifevia redhat_api
Product: Migration Toolkit for VirtualizationFixed in: migration-toolkit-virtualization/mtv-must-gather-rhel8
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-operator-webhook-rhel9

Vendor Advisories (2)

goGHSA-f83f-xpx7-ffpwhigh

Fulcio allocates excessive memory during token parsing

Dec 5, 2025
redhatCVE-2025-66506Important

github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token

Dec 4, 2025

References

github.com / sigstore/fulcio/commit/765a0e57608b9ef390e1eeeea8595b9054c63a5a
Patch
github.com / sigstore/fulcio/security/advisories/GHSA-f83f-xpx7-ffpw
Vendor Advisory