Security
فارسی
All products

Red Hat OpenShift Container Platform 4/openshift4/ose-openshift-controller-manager-rhel8

Red Hat · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Go JOSE: Panic during CBC-HMAC processingCVE-2026-116585 · GHSA-4W3G-JFJ2-CW2Q github.com/go-jose/go-jose/v3github.com/go-jose/go-jose/v4 GoRed Hat Medium Fix reported
Go JOSE: Panics in JSON parsingCVE-2026-116586 · GHSA-VVM8-GF78-28G4 github.com/go-jose/go-jose/v3github.com/go-jose/go-jose/v4 GoRed Hat Medium Fix reported
Go JOSE: DoS when parsing JWKs that contain RSA keysCVE-2026-116587 · GHSA-MGCC-CWW5-FP2Q github.com/go-jose/go-jose/v3github.com/go-jose/go-jose/v4 GoRed Hat High Fix reported
Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSONCVE-2024-24786 · GHSA-8R3F-844C-MC37Version ranges need review. google.golang.org/protobuf/encoding/protojsongoogle.golang.org/protobuf/internal/encoding/json GoRed Hat Medium Fix reported
Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swapCVE-2026-41568 · GHSA-VP62-88P7-QQF5Version ranges need review. github.com/docker/dockergithub.com/moby/moby/v2 GoRed Hat Medium Fix reported
Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URLCVE-2026-24117 · GHSA-4C4X-JM2X-PF9JVersion ranges need review. github.com/sigstore/rekorAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
golang.org/x/net/html has a Quadratic Parsing Complexity issueCVE-2025-47911 · GHSA-W4GW-W5JQ-G9JH golang.org/x/net/htmlgolang.org/x/net GoRed Hat Medium Fix reported
sigstore legacy TUF client allows for arbitrary file writes with target cache path traversalCVE-2026-24137 · GHSA-FCV2-XGW5-PQXFVersion ranges need review. github.com/sigstore/sigstoreAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty MessageCVE-2026-23831 · GHSA-273P-M2CW-6833Version ranges need review. github.com/sigstore/rekorAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archivesCVE-2025-58058 · GHSA-JC7W-C686-C4V9Version ranges need review. github.com/ulikunitz/xzAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9 GoRed Hat Medium Fix reported
Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex BypassCVE-2026-22772 · GHSA-59JP-PJ84-45MRVersion ranges need review. github.com/sigstore/fulcioAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metricsCVE-2023-45142 · GHSA-RCJV-MGP8-QVMRVersion ranges need review. go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestfulgo.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin GoRed Hat High Fix reported
go.mongodb.org/mongo-driver improperly validates cstrings when marshalling Go objects into BSONCVE-2021-20329 · GHSA-F6MQ-5M25-4R72Version ranges need review. go.mongodb.org/mongo-driverMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported