Red Hat OpenStack Platform 18.0/rhoso-operators/openstack-rhel9-operator

Red Hat · Package

9 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
HTTP/2 rapid reset can cause excessive work in net/httpCVE-2023-39325 · GHSA-4374-P667-P6C8Version ranges need review.	golang.org/x/net stdlib	GoRed Hat	High	Fix reported	2026-09-28
containerd CRI server: Host memory exhaustion through Attach goroutine leakCVE-2025-64329 · GHSA-M6HQ-P25P-FFR2Version ranges need review.	github.com/containerd/containerd/v2 github.com/containerd/containerd	GoRed Hat	Medium	Fix reported	2026-09-10
Eclipse Paho Go MQTT may incorrectly encode strings if length exceeds 65535 bytesCVE-2025-10543 · GHSA-32FW-GQ77-F2F2Version ranges need review.	github.com/eclipse/paho.mqtt.golang Red Hat Enterprise Linux 10/rhel10/rhel-bootc	GoRed Hat	Medium	Fix reported	2026-09-10
golang.org/x/net vulnerable to Cross-site ScriptingCVE-2025-22872 · GHSA-VVGC-356P-C3XWVersion ranges need review.	golang.org/x/net Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8	GoRed Hat	Medium	Fix reported	2026-09-10
Excessive CPU consumption in ParseAddress in net/mailCVE-2025-61725 · GO-2025-4006	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9	GoRed Hat	Medium	Fix reported	2026-05-15
cert-manager-controller DoS via Specially Crafted DNS ResponseCVE-2026-25518 · GHSA-GX3X-VQ4P-MHHVVersion ranges need review.	github.com/cert-manager/cert-manager Cryostat 4/cryostat/cryostat-rhel9-operator	GoRed Hat	Medium	Fix reported	2026-03-16
Bare Metal Operator (BMO) can expose any secret from other namespaces via BMCEventSubscription CRDCVE-2025-29781 · GHSA-C98H-7HP9-V9HQVersion ranges need review.	github.com/metal3-io/baremetal-operator/apis Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-reporter-rhel8	GoRed Hat	Medium	Fix reported	2026-03-03
Sensitive headers incorrectly sent after cross-domain redirect in net/httpCVE-2024-45336 · GO-2025-3420	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8	GoRed Hat	Medium	Fix reported	2026-02-17
ironic: OpenStack Ironic: Information disclosure via crafted requestCVE-2026-71201	Red Hat OpenShift Container Platform 4/openshift4/ose-baremetal-rhel8-operator Red Hat OpenShift Container Platform 4/openshift4/ose-baremetal-rhel9-operator	Red Hat	Medium	No fix reported	Not recorded