Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
OpenShift Lightspeed/openshift-lightspeed/lightspeed-rhel9-operator
Red Hat
· Package
43 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
compress zstd: Panic on two-block frames
CVE-2026-116591 · GHSA-FPMH-FRQ8-7RJ8
github.com/klauspost/compress/zstd
github.com/klauspost/compress
Go
Red Hat
High
Fix reported
2026-11-06
Quadratic complexity in WordDecoder.DecodeHeader in mime
CVE-2026-42504 · GO-2026-5038
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
High
Fix reported
2026-10-20
github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files
CVE-2026-61801 · GHSA-MJCV-P78Q-W5FW
Version ranges need review.
github.com/moby/sys/user
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Medium
Fix reported
2026-10-20
Incorrect parsing of IPv6 host literals in net/url
CVE-2026-25679 · GO-2026-4601
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
High
Fix reported
2026-10-16
Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna
CVE-2026-39821 · GO-2026-5026
golang.org/x/net
stdlib
Go
Red Hat
High
Fix reported
2026-10-16
Incorrect enforcement of email constraints in crypto/x509
CVE-2026-27137 · GO-2026-4599
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
High
Fix reported
2026-10-07
Quadratic string concatenation in consumePhrase in net/mail
CVE-2026-42499 · GO-2026-4977
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
High
Fix reported
2026-10-07
Quadratic string concatentation in consumeComment in net/mail
CVE-2026-39820 · GO-2026-4986
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
High
Fix reported
2026-10-07
Memory exhaustion in query parameter parsing in net/url
CVE-2025-61726 · GO-2026-4341
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
Go
Red Hat
High
Fix reported
2026-10-03
Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls
CVE-2026-32283 · GO-2026-4870
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
High
Fix reported
2026-10-03
Unexpected work during chain building in crypto/x509
CVE-2026-32280 · GO-2026-4947
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
High
Fix reported
2026-10-03
Arbitrary inputs are included in errors without any escaping in net/textproto
CVE-2026-42507 · GO-2026-5039
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-10-03
Invoking Encrypted Client Hello privacy leak in crypto/tls
CVE-2026-42505 · GO-2026-5856
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-10-03
Inefficient candidate hostname parsing in crypto/x509
CVE-2026-27145 · GO-2026-5037
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
High
Fix reported
2026-10-02
Unexpected session resumption in crypto/tls
CVE-2025-68121 · GO-2026-4337
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-29
Crash when handling long CNAME response in net
CVE-2026-33811 · GO-2026-4981
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
High
Fix reported
2026-09-29
Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html
CVE-2026-42502 · GO-2026-5027
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-22
Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html
CVE-2026-25681 · GO-2026-5029
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
High
Fix reported
2026-09-22
Invoking duplicate attributes can cause XSS in golang.org/x/net/html
CVE-2026-27136 · GO-2026-5030
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
High
Fix reported
2026-09-22
Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap
CVE-2026-41568 · GHSA-VP62-88P7-QQF5
Version ranges need review.
github.com/docker/docker
github.com/moby/moby/v2
Go
Red Hat
Medium
Fix reported
2026-09-10
Previous
1
2
3
Next
