Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Openshift Data Foundation 4/odf4/ocs-metrics-exporter-rhel9
Red Hat
· Package
12 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Enforce maximum recursion depth in encoding/asn1
CVE-2026-33818 · GO-2026-5972
stdlib
AWS Load Balancer Operator/albo/aws-load-balancer-operator
Go
Red Hat
High
Fix reported
2026-10-20
Excessive CPU consumption from repeated initial window changes in net/http
CVE-2026-78669 · GO-2026-6611
golang.org/x/net
stdlib
Go
Red Hat
High
Fix reported
2026-10-16
Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder
CVE-2026-89090 · GHSA-XMRV-PMRH-HHX2
Version ranges need review.
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream
github.com/aws/aws-sdk-go-v2/service/bedrockagentcore
Go
Red Hat
Medium
Fix reported
2026-09-12
urllib3 allows an unbounded number of links in the decompression chain
CVE-2025-66418 · GHSA-GM62-XV2J-4W53
Version ranges need review.
urllib3
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
PyPI
Red Hat
High
Fix reported
2026-09-10
CloudNativePG's metrics exporter allows privilege escalation to PostgreSQL superuser and OS RCE
CVE-2026-44477 · GHSA-423P-G724-FR39
Version ranges need review.
github.com/cloudnative-pg/cloudnative-pg
Red Hat Openshift Data Foundation 4/odf4/ocs-metrics-exporter-rhel9
Go
Red Hat
Critical
Fix reported
2026-09-10
HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims
CVE-2024-5798 · GHSA-32CJ-5WX4-GQ8P
Version ranges need review.
github.com/hashicorp/vault
Red Hat Openshift Data Foundation 4/odf4/cephcsi-rhel9
Go
Red Hat
Low
Fix reported
2026-08-07
HashiCorp Vault Improper Input Validation vulnerability
CVE-2023-4680 · GHSA-V84F-6R39-CPFC
Version ranges need review.
github.com/hashicorp/vault
Red Hat Openshift Container Storage 4/ocs4/cephcsi-rhel8
Go
Red Hat
Medium
Fix reported
2026-08-07
Infinite parsing loop in golang.org/x/net
CVE-2025-58190 · GO-2026-4441
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
Go
Red Hat
Medium
Fix reported
2026-05-15
Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions
CVE-2024-6468 · GHSA-2QMW-PVF7-4MW6
Version ranges need review.
github.com/hashicorp/vault
Red Hat Openshift Container Storage 4/ocs4/cephcsi-rhel8
Go
Red Hat
High
Fix reported
2026-02-04
xmltodict: xmltodict XML Injection
CVE-2025-9375
OpenShift Service Mesh 3/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9
OpenShift Service Mesh 3/openshift-service-mesh/istio-cni-rhel9
Red Hat
Medium
No fix reported
Not recorded
github.com/cloudnative-pg/cloudnative-pg: CloudNativePG: Remote Code Execution due to cleartext role passwords in pg_stat_statements
CVE-2026-55765
Red Hat Openshift Data Foundation 4/odf4/ocs-client-rhel9-operator
Red Hat Openshift Data Foundation 4/odf4/ocs-metrics-exporter-rhel9
Red Hat
High
No fix reported
Not recorded
go.mongodb.org/mongo-driver: go.mongodb.org/mongo-driver/v2: MongoDB Go Driver: Data deletion via query-operator injection in GridFS file IDs
CVE-2026-88031
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
Red Hat
High
No fix reported
Not recorded
