| knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustionCVE-2026-54462 · GHSA-2HW4-C9M4-F2FJVersion ranges need review. |
knative.dev/pkgBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel10 |
GoRed Hat |
Medium
|
Fix reported |
|
| Enforce maximum recursion depth in encoding/asn1CVE-2026-33818 · GO-2026-5972 |
stdlibAWS Load Balancer Operator/albo/aws-load-balancer-operator |
GoRed Hat |
High
|
Fix reported |
|
| Unbounded allocation when parsing GNU sparse map in archive/tarCVE-2025-58183 · GO-2025-4014 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
Medium
|
Fix reported |
|
| Timing sidechannel for P-256 on ppc64le in crypto/internal/nistecCVE-2025-22866 · GO-2025-3447 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 |
GoRed Hat |
Medium
|
Fix reported |
|
| jwt-go allows excessive memory allocation during header parsingCVE-2025-30204 · GHSA-MH63-6H87-95CPVersion ranges need review. |
github.com/golang-jwt/jwt/v4github.com/golang-jwt/jwt/v5 |
GoRed Hat |
High
|
Fix reported |
|
| golang.org/x/oauth2 Improper Validation of Syntactic Correctness of Input vulnerabilityCVE-2025-22868 · GHSA-6V2P-P543-PHR9Version ranges need review. |
golang.org/x/oauth2Cryostat 3/cryostat-tech-preview/cryostat-storage-rhel8 |
GoRed Hat |
High
|
Fix reported |
|
| HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/netCVE-2025-22870 · GHSA-QXP5-GWG8-XV66Version ranges need review. |
golang.org/x/netstdlib |
GoRed Hat |
Medium
|
Fix reported |
|
| Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situationsCVE-2024-51744 · GHSA-29WX-VH33-7X7RVersion ranges need review. |
github.com/golang-jwt/jwt/v4Builds for Red Hat OpenShift/openshift-builds-triggers-container |
GoRed Hat |
Low
|
Fix reported |
|
| Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)CVE-2024-28180 · GHSA-C5Q2-7R4C-MV6GVersion ranges need review. |
github.com/go-jose/go-jose/v3github.com/go-jose/go-jose/v4 |
GoRed Hat |
Medium
|
Fix reported |
|
| HashiCorp Vault Improper Input Validation vulnerabilityCVE-2023-4680 · GHSA-V84F-6R39-CPFCVersion ranges need review. |
github.com/hashicorp/vaultRed Hat Openshift Container Storage 4/ocs4/cephcsi-rhel8 |
GoRed Hat |
Medium
|
Fix reported |
|
| Hashicorp Vault Community vulnerable to Generation of Error Message Containing Sensitive InformationCVE-2025-4166 · GHSA-GCQF-F89C-68HVVersion ranges need review. |
github.com/hashicorp/vaultRed Hat Openshift Data Foundation 4/odf4/cephcsi-rhel9 |
GoRed Hat |
Medium
|
Fix reported |
|
| HashiCorp Vault has Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNSCVE-2026-5052 · GHSA-8R5M-3F66-QPR3Version ranges need review. |
github.com/hashicorp/vaultRed Hat OpenShift Container Platform 4/openshift4/ose-baremetal-installer-rhel9 |
GoRed Hat |
Medium
|
No fix reported |
|
| HashiCorp Vault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey OperationsCVE-2026-5807 · GHSA-88V5-9HXC-F85RVersion ranges need review. |
github.com/hashicorp/vaultRed Hat Openshift Data Foundation 4/mcg-cli-rhel9 |
GoRed Hat |
High
|
No fix reported |
|
| HashiCorp Vault May Expose Tokens to Auth Plugins Due to Incorrect Header SanitizationCVE-2026-4525 · GHSA-72GW-FMMR-C4R4Version ranges need review. |
github.com/hashicorp/vaultRed Hat Openshift Data Foundation 4/mcg-cli-rhel9 |
GoRed Hat |
High
|
No fix reported |
|
| HashiCorp Vault has a KVv2 Metadata and Secret Deletion Policy Bypass that leads to Denial-of-ServiceCVE-2026-3605 · GHSA-M2W4-8GGF-RJ47Version ranges need review. |
github.com/hashicorp/vaultRed Hat Openshift Data Foundation 4/mcg-cli-rhel9 |
GoRed Hat |
High
|
No fix reported |
|
| Incorrect results returned from Rows.Scan in database/sqlCVE-2025-47907 · GO-2025-3849 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 |
GoRed Hat |
Medium
|
Fix reported |
|
| Incorrect TLS certificate auth method in VaultCVE-2024-2048 · GHSA-R3W7-MFPM-C2VWVersion ranges need review. |
github.com/hashicorp/vaultRed Hat Openshift Data Foundation 4/odf4/mcg-cli-rhel9 |
GoRed Hat |
High
|
Fix reported |
|
| Sensitive headers incorrectly sent after cross-domain redirect in net/httpCVE-2024-45336 · GO-2025-3420 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 |
GoRed Hat |
Medium
|
Fix reported |
|
| Hashicorp Vault has Login MFA Rate Limit Bypass VulnerabilityCVE-2025-6015 · GHSA-V6R4-35F9-9RPWVersion ranges need review. |
github.com/hashicorp/vaultRed Hat Openshift Data Foundation 4/odf4/cephcsi-rhel9 |
GoRed Hat |
Medium
|
Fix reported |
|
| Hashicorp Vault's TOTP Secrets Engine Susceptible to Code Reuse CVE-2025-6014 · GHSA-QV3P-FMV3-9HWWVersion ranges need review. |
github.com/hashicorp/vaultRed Hat Openshift Data Foundation 4/odf4/cephcsi-rhel9 |
GoRed Hat |
Medium
|
Fix reported |
|
