Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
OpenShift Pipelines/openshift-pipelines/pipelines-scheduler-rhel9
Red Hat
· Package
16 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion
CVE-2026-54462 · GHSA-2HW4-C9M4-F2FJ
Version ranges need review.
knative.dev/pkg
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel10
Go
Red Hat
Medium
Fix reported
2026-11-06
Quadratic complexity in WordDecoder.DecodeHeader in mime
CVE-2026-42504 · GO-2026-5038
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
High
Fix reported
2026-10-20
Enforce maximum recursion depth in encoding/asn1
CVE-2026-33818 · GO-2026-5972
stdlib
AWS Load Balancer Operator/albo/aws-load-balancer-operator
Go
Red Hat
High
Fix reported
2026-10-20
Fix Javascript regexp context tracking in html/template
CVE-2026-56858 · GO-2026-6091
stdlib
AWS Load Balancer Operator/albo/aws-load-balancer-controller-rhel8
Go
Red Hat
High
Fix reported
2026-10-20
Add recursion depth guard during decode in encoding/xml
CVE-2026-56859 · GO-2026-6088
stdlib
AWS Load Balancer Operator/albo/aws-load-balancer-operator
Go
Red Hat
High
Fix reported
2026-10-20
Limit handshake messages we are willing to accept post-handshake in crypto/tls
CVE-2026-56862 · GO-2026-6090
stdlib
AWS Load Balancer Operator/albo/aws-load-balancer-operator
Go
Red Hat
High
Fix reported
2026-10-20
Avoid quadratic complexity in resolvePath in net/url
CVE-2026-56860 · GO-2026-6218
stdlib
AWS Load Balancer Operator/albo/aws-load-balancer-operator
Go
Red Hat
High
Fix reported
2026-10-20
Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna
CVE-2026-39821 · GO-2026-5026
golang.org/x/net
stdlib
Go
Red Hat
High
Fix reported
2026-10-16
HTTP/2 transport accepts malformed framing-related headers in net/http
CVE-2026-78660 · GO-2026-6610
golang.org/x/net
stdlib
Go
Red Hat
Medium
Fix reported
2026-10-16
Excessive CPU consumption from repeated initial window changes in net/http
CVE-2026-78669 · GO-2026-6611
golang.org/x/net
stdlib
Go
Red Hat
High
Fix reported
2026-10-16
Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http
CVE-2026-56853 · GO-2026-6089
stdlib
AWS Load Balancer Operator/albo/aws-load-balancer-operator
Go
Red Hat
High
Fix reported
2026-10-07
Arbitrary inputs are included in errors without any escaping in net/textproto
CVE-2026-42507 · GO-2026-5039
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-10-03
Invoking Encrypted Client Hello privacy leak in crypto/tls
CVE-2026-42505 · GO-2026-5856
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-10-03
Inefficient candidate hostname parsing in crypto/x509
CVE-2026-27145 · GO-2026-5037
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
High
Fix reported
2026-10-02
opentelemetry-go's baggage parsing no longer caps raw header length
CVE-2026-41178 · GHSA-5WRP-CWCJ-Q835
go.opentelemetry.io/otel/baggage
go.opentelemetry.io/otel/propagation
Go
Red Hat
Medium
Fix reported
2026-09-10
Bypass of meta content URL escaping causes XSS in html/template
CVE-2026-39823 · GO-2026-4982
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-08-31
