Security
فارسی
All products

Red Hat OpenShift AI (RHOAI)/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9

Red Hat · Package
53 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
go-git missing validation decoding Index v4 files leads to panicCVE-2026-33762 · GHSA-GM2X-2G9H-CCM8Version ranges need review. github.com/go-git/go-git/v4github.com/go-git/go-git/v5 GoRed Hat Low Fix reported
Distrust compromised intermediate certificates in crypto/x509CVE-2026-111943 · GO-2026-6809 rustls-webpkiwebpki-root-certs Rust / CargoGoRed Hat High Fix reported
Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/netCVE-2026-97045 · GO-2026-6866 golang.org/x/netRed Hat OpenShift AI (RHOAI)/rhoai/odh-ai-gateway-operator-rhel9 GoRed Hat Medium Fix reported
Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/netCVE-2026-78661 · GO-2026-6860 golang.org/x/netRed Hat OpenShift AI (RHOAI)/rhoai/odh-ai-gateway-operator-rhel9 GoRed Hat High Fix reported
Compress/s2: Integer Overflow or Wraparound and Out-of-bounds Write in compressCVE-2026-63209 · GHSA-259R-337F-4RFWVersion ranges need review. github.com/klauspost/compressFile Integrity Operator/compliance/openshift-file-integrity-operator-bundle GoRed Hat High Fix reported
Enforce maximum recursion depth in encoding/asn1CVE-2026-33818 · GO-2026-5972 stdlibAWS Load Balancer Operator/albo/aws-load-balancer-operator GoRed Hat High Fix reported
Fix Javascript regexp context tracking in html/templateCVE-2026-56858 · GO-2026-6091 stdlibAWS Load Balancer Operator/albo/aws-load-balancer-controller-rhel8 GoRed Hat High Fix reported
Add recursion depth guard during decode in encoding/xmlCVE-2026-56859 · GO-2026-6088 stdlibAWS Load Balancer Operator/albo/aws-load-balancer-operator GoRed Hat High Fix reported
Limit handshake messages we are willing to accept post-handshake in crypto/tlsCVE-2026-56862 · GO-2026-6090 stdlibAWS Load Balancer Operator/albo/aws-load-balancer-operator GoRed Hat High Fix reported
Avoid quadratic complexity in resolvePath in net/urlCVE-2026-56860 · GO-2026-6218 stdlibAWS Load Balancer Operator/albo/aws-load-balancer-operator GoRed Hat High Fix reported
Lack of limit on size of parsed Range headers in net/httpCVE-2026-78667 · GO-2026-6609 stdlibAWS Load Balancer Operator/albo/aws-load-balancer-rhel8-operator GoRed Hat High Fix reported
Excessive CPU consumption from repeated initial window changes in net/httpCVE-2026-78669 · GO-2026-6611 golang.org/x/netstdlib GoRed Hat High Fix reported
Reject malformed ECH outer extension references in crypto/tlsCVE-2026-97031 · GO-2026-6607 stdlibExploit Intelligence/exploit-intelligence/exploit-intelligence-operator-controller-rhel9 GoRed Hat High Fix reported
Quadratic string concatenation in consumePhrase in net/mailCVE-2026-42499 · GO-2026-4977 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat High Fix reported
Quadratic string concatentation in consumeComment in net/mailCVE-2026-39820 · GO-2026-4986 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat High Fix reported
Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/httpCVE-2026-56853 · GO-2026-6089 stdlibAWS Load Balancer Operator/albo/aws-load-balancer-operator GoRed Hat High Fix reported
Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tlsCVE-2026-32283 · GO-2026-4870 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat High Fix reported
Unexpected work during chain building in crypto/x509CVE-2026-32280 · GO-2026-4947 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat High Fix reported
Prevent DoS on deadlocked established channel in golang.org/x/crypto/sshCVE-2026-56855 · GO-2026-6355 golang.org/x/cryptoAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
golang.org/x/crypto: Invoking pathological inputs can lead to client panicCVE-2026-46598 · GHSA-9M57-25V3-79X9Version ranges need review. golang.org/x/cryptoAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported