Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Ceph Storage 9/rhceph-ci/alloy
Red Hat
· Package
11 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
source-map-js allows event-loop denial of service through indexed source-map section offsets
CVE-2026-93749 · GHSA-68FV-2MGG-JV7Q
source-map-js
Node HealthCheck Operator/redhat-user-workloads/nhc-bundle-0-9
npm
Red Hat
High
Fix reported
2026-10-06
golang.org/x/crypto: Invoking client can cause server deadlock on unexpected responses
CVE-2026-39830 · GHSA-VGWF-H737-FF37
Version ranges need review.
golang.org/x/crypto
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Critical
Fix reported
2026-09-23
golang.org/x/crypto doesn't drop invoking agent constraints when forwarding keys
CVE-2026-39832 · GHSA-F5WC-C3C7-36MC
Version ranges need review.
golang.org/x/crypto
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Critical
Fix reported
2026-09-15
DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS
CVE-2026-75838 · GHSA-55Q2-FJHQ-7XH7
dompurify
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-ui-rhel9
npm
Red Hat
Medium
Fix reported
2026-09-10
golang.org/x/crypto vulnerable to invoking bypass of certificate restrictions
CVE-2026-39828 · GHSA-45GG-VH54-H5M9
Version ranges need review.
golang.org/x/crypto
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange
CVE-2025-22869 · GHSA-HCG3-Q754-CR77
Version ranges need review.
golang.org/x/crypto
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-reporter-rhel8
Go
Red Hat
High
Fix reported
2026-09-10
Non-linear parsing of case-insensitive content in golang.org/x/net/html
CVE-2024-45338 · GHSA-W32M-9786-JP63
golang.org/x/net/html
golang.org/x/net
Go
Red Hat
High
Fix reported
2026-09-10
moby/go-archive: Crafted tar archive can write outside the extraction directory
CVE-2026-17106 · GHSA-HFG8-HC9C-6C3H
Version ranges need review.
github.com/moby/go-archive
DPU kit for NVIDIA/dpu-kit-for-nvidia/must-gather-rhel10
Go
Red Hat
High
Fix reported
2026-09-02
github.com/docker/buildx: Docker Buildx: Information disclosure via untrusted Bake definition
CVE-2026-103433
Red Hat Ceph Storage 9/rhceph-ci/alloy
Red Hat Ceph Storage 9/rhceph/alloy-rhel10
Red Hat
Medium
No fix reported
Not recorded
github.com/apache/thrift: Apache Thrift: Denial of Service via improper handling of compressed data
CVE-2026-94637
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-temporal-rhel9
Multicluster Global Hub/multicluster-globalhub/multicluster-globalhub-grafana-rhel9
Red Hat
High
No fix reported
Not recorded
github.com/apache/thrift: Apache Thrift: Denial of Service via unbounded recursion in Go transports
CVE-2026-83663
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-temporal-rhel9
Multicluster Global Hub/multicluster-globalhub/multicluster-globalhub-grafana-rhel9
Red Hat
High
No fix reported
Not recorded
