Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat OpenShift Container Platform 4/openshift4/ose-aws-efs-csi-driver-container-rhel8
Red Hat
· Package
15 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Memory exhaustion in query parameter parsing in net/url
CVE-2025-61726 · GO-2026-4341
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
Go
Red Hat
High
Fix reported
2026-10-03
Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh
CVE-2026-56855 · GO-2026-6355
golang.org/x/crypto
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-24
Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html
CVE-2026-42502 · GO-2026-5027
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-22
golang.org/x/crypto vulnerable to infinite loop on large channel writes
CVE-2026-39834 · GHSA-RM3J-F69W-WQMQ
Version ranges need review.
golang.org/x/crypto
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Critical
Fix reported
2026-09-22
golang.org/x/crypto: Invoking memory leak when rejecting channels can lead to DoS
CVE-2026-39827 · GHSA-QPW4-5X99-6VJP
Version ranges need review.
golang.org/x/crypto
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-22
Golang FIPS OpenSSL has a Use of Uninitialized Variable vulnerability
CVE-2024-9355 · GHSA-3H3X-2HWV-HR52
Version ranges need review.
github.com/golang-fips/openssl
NBDE Tang Server/tang-operator-bundle-container
Go
Red Hat
High
No fix reported
2026-09-21
Go Net HTML parser is vulnerable to denial of service
CVE-2026-25680 · GHSA-5CV4-JP36-H3MW
Version ranges need review.
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
Wheel Affected by Arbitrary File Permission Modification via Path Traversal in wheel unpack
CVE-2026-24049 · GHSA-8RRH-RW8J-W5FX
Version ranges need review.
wheel
Logging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-operator-bundle
PyPI
Red Hat
High
Fix reported
2026-09-10
golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read
CVE-2025-47914 · GHSA-F6X5-JH6R-WRFV
Version ranges need review.
golang.org/x/crypto
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption
CVE-2025-58181 · GHSA-J5W8-Q4QC-RX2X
Version ranges need review.
golang.org/x/crypto
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
Node Denial of Service via kubelet Checkpoint API
CVE-2025-0426 · GHSA-JGFP-53C3-624W
Version ranges need review.
k8s.io/kubernetes
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-shared-resource-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
Uncontrolled Resource Consumption in promhttp
CVE-2022-21698 · GHSA-CG3Q-J54F-5P7P
Version ranges need review.
github.com/prometheus/client_golang
Cost Management Metrics Operator/costmanagement-metrics-operator-container
Go
Red Hat
High
Fix reported
2026-09-10
golang.org/x/crypto/ssh Denial of service via crafted Signer
CVE-2022-27191 · GHSA-8C26-WMH5-6G9V
Version ranges need review.
golang.org/x/crypto
Migration Toolkit for Containers/cpma
Go
Red Hat
High
Fix reported
2026-09-10
Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh
CVE-2026-78662 · GO-2026-6354
golang.org/x/crypto
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-03
github.com/kubernetes-sigs/aws-efs-csi-driver: AWS EFS CSI Driver: Arbitrary mount option injection via mounttargetipmap attribute
CVE-2026-103505
Red Hat OpenShift Container Platform 4/openshift4/ose-aws-efs-csi-driver-container-rhel8
Red Hat OpenShift Container Platform 4/openshift4/ose-aws-efs-csi-driver-container-rhel9
Red Hat
Medium
No fix reported
Not recorded
