Security
فارسی
All products

Red Hat OpenShift Container Platform 4/openshift4/ose-thanos-rhel8

Red Hat · Package
30 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
compress zstd: Panic on two-block framesCVE-2026-116591 · GHSA-FPMH-FRQ8-7RJ8 github.com/klauspost/compress/zstdgithub.com/klauspost/compress GoRed Hat High Fix reported
Compress/s2: Integer Overflow or Wraparound and Out-of-bounds Write in compressCVE-2026-63209 · GHSA-259R-337F-4RFWVersion ranges need review. github.com/klauspost/compressFile Integrity Operator/compliance/openshift-file-integrity-operator-bundle GoRed Hat High Fix reported
Bootstrap Vulnerable to Cross-Site Scripting in its Popover and Tooltip ComponentsCVE-2025-1647 · GHSA-Q58R-HWC8-RM9J bootstrapRed Hat Ceph Storage 4/ceph npmRed Hat Medium No fix reported
Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream DecoderCVE-2026-89090 · GHSA-XMRV-PMRH-HHX2Version ranges need review. github.com/aws/aws-sdk-go-v2/aws/protocol/eventstreamgithub.com/aws/aws-sdk-go-v2/service/bedrockagentcore GoRed Hat Medium Fix reported
OpenTelemetry-Go: Unsynchronized baggage map can panic under concurrent accessCVE-2026-45404 · GHSA-42CJ-99W8-CP2PVersion ranges need review. go.opentelemetry.io/otel/bridge/opentracingMulticluster Global Hub/multicluster-globalhub/multicluster-globalhub-grafana-rhel9 GoRed Hat Medium Fix reported
Exposure of Sensitive Information to an Unauthorized Actor in follow-redirectsCVE-2022-0536 · GHSA-PW2R-VQ6V-HR8C follow-redirects.NET Core 3.1 on Red Hat Enterprise Linux/rh-dotnet31-dotnet npmRed Hat Medium Fix reported
Inefficient Regular Expression Complexity in nth-checkCVE-2021-3803 · GHSA-RP65-9CF3-CJXR nth-checkOpenShift Service Mesh 1/servicemesh-grafana npmRed Hat High Fix reported
Inefficient Regular Expression Complexity in chalk/ansi-regexCVE-2021-3807 · GHSA-93Q8-GQ69-WQMW ansi-regexMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed Hat High Fix reported
Regular Expression Denial of Service in browserslistCVE-2021-23364 · GHSA-W8QV-6JWH-64R5 browserslistOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat Medium Fix reported
goproxy Denial of Service vulnerabilityCVE-2023-37788 · GHSA-4R8X-2P26-976PVersion ranges need review. github.com/elazarl/goproxyLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator GoRed Hat High Fix reported
Cilium node based network policies may incorrectly allow workload trafficCVE-2025-30163 · GHSA-C6PF-2V8J-96MCVersion ranges need review. github.com/cilium/ciliumNetwork Observability Operator/network-observability/network-observability-ebpf-agent-rhel9 GoRed Hat Low Fix reported
Cilium East-west traffic not subject to egress policy enforcement for requests via Gateway API load balancersCVE-2025-30162 · GHSA-24QP-4XX8-3JVJVersion ranges need review. github.com/cilium/ciliumNetwork Observability Operator/network-observability/network-observability-ebpf-agent-rhel9 GoRed Hat Low Fix reported
Open redirect in url-parseCVE-2021-3664 · GHSA-HH27-FFR2-F2JC url-parseOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat Medium Fix reported
Denial of service in css-whatCVE-2021-33587 · GHSA-Q8PJ-2VQX-8GGC css-whatOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat High Fix reported
Potential memory exposure in dns-packetCVE-2021-23386 · GHSA-3WCQ-X3MQ-6R9P dns-packetOpenShift Service Mesh 2.0/servicemesh-prometheus npmRed Hat High Fix reported
json-schema is vulnerable to Prototype PollutionCVE-2021-3918 · GHSA-896R-F27R-55MW json-schemaMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed Hat Critical Fix reported
Prototype Pollution in set-valueCVE-2021-23440 · GHSA-4JQC-8M5R-9RPR set-valueset-value-nuget npmNuGetRed Hat High Fix reported
Prototype Pollution in object-pathCVE-2021-23434 · GHSA-V39P-96QG-C8RF object-pathOpenShift Service Mesh 1/servicemesh-prometheus npmRed Hat Medium Fix reported
Regular Expression Denial of Service in postcssCVE-2021-23368 · GHSA-HWJ9-H5MP-3PM3 postcssLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 npmRed Hat Medium Fix reported
Regular Expression Denial of Service in hosted-git-infoCVE-2021-23362 · GHSA-43F8-2H32-F4CJ hosted-git-infoOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat Medium Fix reported