CVE-2026-107174 Source-to-image: source-to-image: security boundary bypass via absolute symbolic link extraction

[
  {
    "vendor": "Red Hat",
    "product": "OpenShift Serverless",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift-serverless-1/kn-client-kn-rhel9",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:serverless:1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "OpenShift Serverless",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift-serverless-1/kn-plugin-func-func-util-rhel9",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:serverless:1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "OpenShift Serverless",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift-serverless-clients",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:serverless:1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "OpenShift Source-to-Image (S2I)",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "source-to-image/source-to-image-rhel8",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:source_to_image:1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "OpenShift Source-to-Image (S2I)",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "source-to-image/source-to-image-rhel9",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:source_to_image:1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift4/ose-docker-builder",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift4/ose-docker-builder-rhel9",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Web Terminal",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "web-terminal/web-terminal-tooling-rhel9",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:webterminal:1"
    ]
  }
]