Security
فارسی
All products

Red Hat Enterprise Linux 8/container-tools:rhel8/conmon

Red Hat · Package
31 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Reset context tracking on consecutive template expressions in html/templateCVE-2026-94448 · GO-2026-6599 stdlibOpenShift Developer Tools and Services/helm GoRed Hat Medium Fix reported
HTTP/2 transport accepts malformed framing-related headers in net/httpCVE-2026-78660 · GO-2026-6610 golang.org/x/netstdlib GoRed Hat Medium Fix reported
HTTP/1 client connection desynchronization after CONNECT rejection in net/httpCVE-2026-56866 · GO-2026-6605 stdlibOpenShift Developer Tools and Services/helm GoRed Hat Medium Fix reported
HTTP/2 server crash due to HPACK encoder race in net/httpCVE-2026-97032 · GO-2026-6617 golang.org/x/netstdlib GoRed Hat Medium Fix reported
Double flow control refund on HTTP/2 server streams in net/httpCVE-2026-78663 · GO-2026-6612 golang.org/x/netstdlib GoRed Hat Medium Fix reported
HTTP/2 server memory exhaustion due to Trailer headers in net/httpCVE-2026-78659 · GO-2026-6603 golang.org/x/netstdlib GoRed Hat Medium Fix reported
HTTP/1 server connection desynchronization after 2xx CONNECT response in net/httpCVE-2026-94439 · GO-2026-6613 stdlibOpenShift Developer Tools and Services/helm GoRed Hat Medium Fix reported
Recognize yield as regexp preceder keyword in html/templateCVE-2026-97030 · GO-2026-6600 stdlibOpenShift Developer Tools and Services/helm GoRed Hat Medium Fix reported
Sensitive headers not cleared on cross-origin redirect in net/httpCVE-2025-4673 · GO-2025-3751 stdlibCryostat 4/cryostat/cryostat-storage-rhel9 GoRed Hat Medium Fix reported
Incorrect enforcement of email constraints in crypto/x509CVE-2026-27137 · GO-2026-4599 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat High Fix reported
JsBraceDepth Context Tracking Bugs (XSS) in html/templateCVE-2026-32289 · GO-2026-4865 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/redhat-user-workloads/appliance GoRed Hat Medium Fix reported
Unbounded allocation for old GNU sparse in archive/tarCVE-2026-32288 · GO-2026-4869 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/redhat-user-workloads/assisted-installer-ds-main GoRed Hat Medium Fix reported
Arbitrary inputs are included in errors without any escaping in net/textprotoCVE-2026-42507 · GO-2026-5039 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium Fix reported
Invoking Encrypted Client Hello privacy leak in crypto/tlsCVE-2026-42505 · GO-2026-5856 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium Fix reported
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistecCVE-2025-22866 · GO-2025-3447 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 GoRed Hat Medium Fix reported
golang.org/x/crypto: Invoking memory leak when rejecting channels can lead to DoSCVE-2026-39827 · GHSA-QPW4-5X99-6VJPVersion ranges need review. golang.org/x/cryptoAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of ServiceCVE-2026-53495 · GHSA-7JXH-36Q5-GCQVVersion ranges need review. github.com/containerd/containerd/v2github.com/containerd/containerd GoRed Hat Medium Fix reported
containerd CRI server: Host memory exhaustion through Attach goroutine leakCVE-2025-64329 · GHSA-M6HQ-P25P-FFR2Version ranges need review. github.com/containerd/containerd/v2github.com/containerd/containerd GoRed Hat Medium Fix reported
golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds readCVE-2025-47914 · GHSA-F6X5-JH6R-WRFVVersion ranges need review. golang.org/x/cryptoAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9 GoRed Hat Medium Fix reported
golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumptionCVE-2025-58181 · GHSA-J5W8-Q4QC-RX2XVersion ranges need review. golang.org/x/cryptoBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9 GoRed Hat Medium Fix reported