Security
فارسی
All products

Red Hat OpenShift Container Platform 4/butane

Red Hat · Package
37 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Enforce maximum recursion depth in encoding/asn1CVE-2026-33818 · GO-2026-5972 stdlibAWS Load Balancer Operator/albo/aws-load-balancer-operator GoRed Hat High Fix reported
Limit handshake messages we are willing to accept post-handshake in crypto/tlsCVE-2026-56862 · GO-2026-6090 stdlibAWS Load Balancer Operator/albo/aws-load-balancer-operator GoRed Hat High Fix reported
Avoid quadratic complexity in resolvePath in net/urlCVE-2026-56860 · GO-2026-6218 stdlibAWS Load Balancer Operator/albo/aws-load-balancer-operator GoRed Hat High Fix reported
Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idnaCVE-2026-39821 · GO-2026-5026 golang.org/x/netstdlib GoRed Hat High Fix reported
HTTP/2 transport accepts malformed framing-related headers in net/httpCVE-2026-78660 · GO-2026-6610 golang.org/x/netstdlib GoRed Hat Medium Fix reported
HTTP/1 client connection desynchronization after CONNECT rejection in net/httpCVE-2026-56866 · GO-2026-6605 stdlibOpenShift Developer Tools and Services/helm GoRed Hat Medium Fix reported
HTTP/2 server crash due to HPACK encoder race in net/httpCVE-2026-97032 · GO-2026-6617 golang.org/x/netstdlib GoRed Hat Medium Fix reported
Memory limit bypass when parsing MIME headers in net/textproto, mime/multipartCVE-2026-94440 · GO-2026-6608 stdlibOpenShift Developer Tools and Services/helm GoRed Hat Medium Fix reported
Double flow control refund on HTTP/2 server streams in net/httpCVE-2026-78663 · GO-2026-6612 golang.org/x/netstdlib GoRed Hat Medium Fix reported
Lack of limit on size of parsed Range headers in net/httpCVE-2026-78667 · GO-2026-6609 stdlibAWS Load Balancer Operator/albo/aws-load-balancer-rhel8-operator GoRed Hat High Fix reported
HTTP/2 server memory exhaustion due to Trailer headers in net/httpCVE-2026-78659 · GO-2026-6603 golang.org/x/netstdlib GoRed Hat Medium Fix reported
HTTP/1 server connection desynchronization after 2xx CONNECT response in net/httpCVE-2026-94439 · GO-2026-6613 stdlibOpenShift Developer Tools and Services/helm GoRed Hat Medium Fix reported
Root.Mkdir(All) can follow junctions out of the root on Windows in osCVE-2026-56857 · GO-2026-6604 stdlibOpenShift Developer Tools and Services/helm GoRed Hat Low Fix reported
Excessive CPU consumption from repeated initial window changes in net/httpCVE-2026-78669 · GO-2026-6611 golang.org/x/netstdlib GoRed Hat High Fix reported
Reject malformed ECH outer extension references in crypto/tlsCVE-2026-97031 · GO-2026-6607 stdlibExploit Intelligence/exploit-intelligence/exploit-intelligence-operator-controller-rhel9 GoRed Hat High Fix reported
Sensitive headers not cleared on cross-origin redirect in net/httpCVE-2025-4673 · GO-2025-3751 stdlibCryostat 4/cryostat/cryostat-storage-rhel9 GoRed Hat Medium Fix reported
Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509CVE-2026-33810 · GO-2026-4866 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat High Fix reported
Arbitrary inputs are included in errors without any escaping in net/textprotoCVE-2026-42507 · GO-2026-5039 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium Fix reported
Invoking Encrypted Client Hello privacy leak in crypto/tlsCVE-2026-42505 · GO-2026-5856 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium Fix reported
Golang FIPS OpenSSL has a Use of Uninitialized Variable vulnerabilityCVE-2024-9355 · GHSA-3H3X-2HWV-HR52Version ranges need review. github.com/golang-fips/opensslNBDE Tang Server/tang-operator-bundle-container GoRed Hat High No fix reported