Security
فارسی
All products

Multicluster Global Hub/multicluster-globalhub/multicluster-globalhub-rhel9-operator

Red Hat · Package
15 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
compress zstd: Panic on two-block framesCVE-2026-116591 · GHSA-FPMH-FRQ8-7RJ8 github.com/klauspost/compress/zstdgithub.com/klauspost/compress GoRed Hat High Fix reported
github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database filesCVE-2026-61801 · GHSA-MJCV-P78Q-W5FWVersion ranges need review. github.com/moby/sys/userAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of ServiceCVE-2026-53495 · GHSA-7JXH-36Q5-GCQVVersion ranges need review. github.com/containerd/containerd/v2github.com/containerd/containerd GoRed Hat Medium Fix reported
pgx: SQL Injection via placeholder confusion with dollar quoted string literalsCVE-2026-41889 · GHSA-J88V-2CHJ-QFWXVersion ranges need review. github.com/jackc/pgx/v4github.com/jackc/pgx/v5 GoRed Hat Low Fix reported
containerd CRI server: Host memory exhaustion through Attach goroutine leakCVE-2025-64329 · GHSA-M6HQ-P25P-FFR2Version ranges need review. github.com/containerd/containerd/v2github.com/containerd/containerd GoRed Hat Medium Fix reported
Go Net HTML parser is vulnerable to denial of serviceCVE-2026-25680 · GHSA-5CV4-JP36-H3MWVersion ranges need review. golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
golang.org/x/net/html has a Quadratic Parsing Complexity issueCVE-2025-47911 · GHSA-W4GW-W5JQ-G9JH golang.org/x/net/htmlgolang.org/x/net GoRed Hat Medium Fix reported
filippo.io/edwards25519 MultiScalarMult produces invalid results or undefined behavior if receiver is not the identityCVE-2026-26958 · GHSA-FW7P-63QQ-7HPRVersion ranges need review. filippo.io/edwards25519Cryostat 4/cryostat/cryostat-storage-rhel9 GoRed Hat Low Fix reported
golang.org/x/net vulnerable to Cross-site ScriptingCVE-2025-22872 · GHSA-VVGC-356P-C3XWVersion ranges need review. golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 GoRed Hat Medium Fix reported
Excessive resource consumption when printing error string for host certificate validation in crypto/x509CVE-2025-61729 · GO-2025-4155 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 GoRed Hat High Fix reported
Infinite parsing loop in golang.org/x/netCVE-2025-58190 · GO-2026-4441 golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 GoRed Hat Medium Fix reported
Helm Allows A Specially Crafted JSON Schema To Cause A Stack OverflowCVE-2025-32387 · GHSA-5XQW-8HWV-WG92Version ranges need review. helm.sh/helm/v3Deployment Validation Operator/deployment-validation-operator-container GoRed Hat Medium Fix reported
Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory TerminationCVE-2025-32386 · GHSA-4HFP-H4CW-HJ8PVersion ranges need review. helm.sh/helm/v3Deployment Validation Operator/deployment-validation-operator-container GoRed Hat Medium Fix reported
Helm Charts with Specific JSON Schema Values Can Cause Memory ExhaustionCVE-2025-55199 · GHSA-9H84-QMV7-982PVersion ranges need review. helm.sh/helm/v3helm.sh/helm GoRed Hat Medium Fix reported
Helm May Panic Due To Incorrect YAML ContentCVE-2025-55198 · GHSA-F9F8-9PMF-XV68Version ranges need review. helm.sh/helm/v3helm.sh/helm GoRed Hat Medium Fix reported