Security
فارسی
All products

External Secrets Operator for Red Hat OpenShift/external-secrets-operator/external-secrets-rhel9

Red Hat · Package
69 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
go-git missing validation decoding Index v4 files leads to panicCVE-2026-33762 · GHSA-GM2X-2G9H-CCM8Version ranges need review. github.com/go-git/go-git/v4github.com/go-git/go-git/v5 GoRed Hat Low Fix reported
Quadratic complexity in WordDecoder.DecodeHeader in mimeCVE-2026-42504 · GO-2026-5038 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat High Fix reported
Add recursion depth guard during decode in encoding/xmlCVE-2026-56859 · GO-2026-6088 stdlibAWS Load Balancer Operator/albo/aws-load-balancer-operator GoRed Hat High Fix reported
External Secrets Operator: label enforcement bypass in webhook generator enables secret exfiltrationCVE-2026-26287 · GHSA-Q7HV-XX6H-Q2X8Version ranges need review. github.com/external-secrets/external-secretsExternal Secrets Operator for Red Hat OpenShift/external-secrets-operator/external-secrets-rhel9 GoRed Hat High Fix reported
Incorrect parsing of IPv6 host literals in net/urlCVE-2026-25679 · GO-2026-4601 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat High Fix reported
Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idnaCVE-2026-39821 · GO-2026-5026 golang.org/x/netstdlib GoRed Hat High Fix reported
HTTP/2 transport accepts malformed framing-related headers in net/httpCVE-2026-78660 · GO-2026-6610 golang.org/x/netstdlib GoRed Hat Medium Fix reported
Lack of limit on size of parsed Range headers in net/httpCVE-2026-78667 · GO-2026-6609 stdlibAWS Load Balancer Operator/albo/aws-load-balancer-rhel8-operator GoRed Hat High Fix reported
JsBraceDepth Context Tracking Bugs (XSS) in html/templateCVE-2026-32289 · GO-2026-4865 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/redhat-user-workloads/appliance GoRed Hat Medium Fix reported
Quadratic string concatenation in consumePhrase in net/mailCVE-2026-42499 · GO-2026-4977 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat High Fix reported
Unbounded allocation for old GNU sparse in archive/tarCVE-2026-32288 · GO-2026-4869 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/redhat-user-workloads/assisted-installer-ds-main GoRed Hat Medium Fix reported
Quadratic string concatentation in consumeComment in net/mailCVE-2026-39820 · GO-2026-4986 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat High Fix reported
Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tlsCVE-2026-32283 · GO-2026-4870 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat High Fix reported
Unexpected work during chain building in crypto/x509CVE-2026-32280 · GO-2026-4947 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat High Fix reported
Inefficient policy validation in crypto/x509CVE-2026-32281 · GO-2026-4946 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/redhat-user-workloads/appliance GoRed Hat Medium Fix reported
Arbitrary inputs are included in errors without any escaping in net/textprotoCVE-2026-42507 · GO-2026-5039 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium Fix reported
Invoking Encrypted Client Hello privacy leak in crypto/tlsCVE-2026-42505 · GO-2026-5856 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium Fix reported
Crash when handling long CNAME response in netCVE-2026-33811 · GO-2026-4981 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat High Fix reported
Prevent DoS on deadlocked established channel in golang.org/x/crypto/sshCVE-2026-56855 · GO-2026-6355 golang.org/x/cryptoAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
golang.org/x/crypto: Invoking client can cause server deadlock on unexpected responsesCVE-2026-39830 · GHSA-VGWF-H737-FF37Version ranges need review. golang.org/x/cryptoAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Critical Fix reported