Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/osbuild-composer@101-2?arch=el8_10
purl pkg:rpm/redhat/osbuild-composer@101-2?arch=el8_10
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-6nrn-u58x-mben
Aliases:
CVE-2024-1394
GHSA-78hx-gp6g-7mj6
Memory leaks in code encrypting and verifying RSA payloads Using crafted public RSA keys which are not compliant with SP 800-56B can cause a small memory leak when encrypting and verifying payloads. An attacker can leverage this flaw to gradually erode available memory to the point where the host crashes for lack of resources. Upon restart the attacker would have to begin again, but nevertheless there is the potential to deny service. There are no reported fixed by versions.
VCID-hfxt-nnd8-dfc8
Aliases:
CVE-2024-34156
encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-04T20:07:08.193247+00:00 RedHat Importer Affected by VCID-hfxt-nnd8-dfc8 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-34156.json 38.1.0
2026-04-01T13:48:56.285831+00:00 RedHat Importer Affected by VCID-6nrn-u58x-mben https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-1394.json 38.0.0
2026-04-01T13:45:23.464833+00:00 RedHat Importer Affected by VCID-hfxt-nnd8-dfc8 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-34156.json 38.0.0