| Enforce maximum recursion depth in encoding/asn1CVE-2026-33818 · GO-2026-5972 |
stdlibAWS Load Balancer Operator/albo/aws-load-balancer-operator |
GoRed Hat |
High
|
Fix reported |
|
| Limit handshake messages we are willing to accept post-handshake in crypto/tlsCVE-2026-56862 · GO-2026-6090 |
stdlibAWS Load Balancer Operator/albo/aws-load-balancer-operator |
GoRed Hat |
High
|
Fix reported |
|
| Avoid quadratic complexity in resolvePath in net/urlCVE-2026-56860 · GO-2026-6218 |
stdlibAWS Load Balancer Operator/albo/aws-load-balancer-operator |
GoRed Hat |
High
|
Fix reported |
|
| github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database filesCVE-2026-61801 · GHSA-MJCV-P78Q-W5FWVersion ranges need review. |
github.com/moby/sys/userAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 |
GoRed Hat |
Medium
|
Fix reported |
|
| Root.Mkdir(All) can follow junctions out of the root on Windows in osCVE-2026-56857 · GO-2026-6604 |
stdlibOpenShift Developer Tools and Services/helm |
GoRed Hat |
Low
|
Fix reported |
|
| Inefficient policy validation in crypto/x509CVE-2026-32281 · GO-2026-4946 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/redhat-user-workloads/appliance |
GoRed Hat |
Medium
|
Fix reported |
|
| Invoking Encrypted Client Hello privacy leak in crypto/tlsCVE-2026-42505 · GO-2026-5856 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
Medium
|
Fix reported |
|
| TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unixCVE-2026-32282 · GO-2026-4864 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/redhat-user-workloads/appliance |
GoRed Hat |
Medium
|
Fix reported |
|
| Golang FIPS OpenSSL has a Use of Uninitialized Variable vulnerabilityCVE-2024-9355 · GHSA-3H3X-2HWV-HR52Version ranges need review. |
github.com/golang-fips/opensslNBDE Tang Server/tang-operator-bundle-container |
GoRed Hat |
High
|
No fix reported |
|
| ebpf-go is vulnerable to integer overflow via LoadCollectionSpecFromReaderCVE-2026-10722 · GHSA-XHGW-QWWF-PG32Version ranges need review. |
github.com/cilium/ebpfConfidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9 |
GoRed Hat |
Low
|
Fix reported |
|
| runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations CVE-2026-41579 · GHSA-XJVP-4FHW-GC47Version ranges need review. |
github.com/opencontainers/runcRed Hat Enterprise Linux 8/container-tools:rhel8/runc |
GoRed Hat |
Medium
|
Fix reported |
|
| rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runcCVE-2023-25809 · GHSA-M8CG-XC2P-R3FCVersion ranges need review. |
github.com/opencontainers/runcRed Hat Enterprise Linux 7/runc |
GoRed Hat |
Low
|
Fix reported |
|
| Cilium node based network policies may incorrectly allow workload trafficCVE-2025-30163 · GHSA-C6PF-2V8J-96MCVersion ranges need review. |
github.com/cilium/ciliumNetwork Observability Operator/network-observability/network-observability-ebpf-agent-rhel9 |
GoRed Hat |
Low
|
Fix reported |
|
| Quadratic complexity when parsing some invalid inputs in encoding/pemCVE-2025-61723 · GO-2025-4009 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
Medium
|
Fix reported |
|
| ALPN negotiation error contains attacker controlled information in crypto/tlsCVE-2025-58189 · GO-2025-4008 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
Medium
|
Fix reported |
|
| Parsing DER payload can cause memory exhaustion in encoding/asn1CVE-2025-58185 · GO-2025-4011 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
Medium
|
Fix reported |
|
| Improper access to parent directory of root in osCVE-2025-22873 · GO-2026-4403 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
Medium
|
Fix reported |
|
| Cilium East-west traffic not subject to egress policy enforcement for requests via Gateway API load balancersCVE-2025-30162 · GHSA-24QP-4XX8-3JVJVersion ranges need review. |
github.com/cilium/ciliumNetwork Observability Operator/network-observability/network-observability-ebpf-agent-rhel9 |
GoRed Hat |
Low
|
Fix reported |
|
| Uncontrolled memory consumption in math/bigCVE-2022-23772 · GO-2021-0317 |
stdlibMigration Toolkit for Containers/cpma |
GoRed Hat |
Medium
|
Fix reported |
|
| Stack exhaustion when compiling deeply nested expressions in regexpCVE-2022-24921 · GO-2021-0347 |
stdlibMigration Toolkit for Containers/cpma |
GoRed Hat |
Medium
|
Fix reported |
|
