All products

Red Hat OpenShift Container Platform 4/openshift4/ose-thanos-rhel9

Red Hat · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
compress zstd: Panic on two-block framesCVE-2026-116591 · GHSA-FPMH-FRQ8-7RJ8 github.com/klauspost/compress/zstdgithub.com/klauspost/compress GoRed Hat High Fix reported
Command Injection in lodashCVE-2021-23337 · GHSA-35JH-R3H4-6JHM lodash-eslodash-template npmRed HatRubyGems High Fix reported
Bootstrap Vulnerable to Cross-Site Scripting in its Popover and Tooltip ComponentsCVE-2025-1647 · GHSA-Q58R-HWC8-RM9J bootstrapRed Hat Ceph Storage 4/ceph npmRed Hat Medium No fix reported
Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream DecoderCVE-2026-89090 · GHSA-XMRV-PMRH-HHX2Version ranges need review. github.com/aws/aws-sdk-go-v2/aws/protocol/eventstreamgithub.com/aws/aws-sdk-go-v2/service/bedrockagentcore GoRed Hat Medium Fix reported
OpenTelemetry-Go: Unsynchronized baggage map can panic under concurrent accessCVE-2026-45404 · GHSA-42CJ-99W8-CP2PVersion ranges need review. go.opentelemetry.io/otel/bridge/opentracingMulticluster Global Hub/multicluster-globalhub/multicluster-globalhub-grafana-rhel9 GoRed Hat Medium Fix reported
ebpf-go is vulnerable to integer overflow via LoadCollectionSpecFromReaderCVE-2026-10722 · GHSA-XHGW-QWWF-PG32Version ranges need review. github.com/cilium/ebpfConfidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9 GoRed Hat Low Fix reported
Logrus is vulnerable to DoS when using Entry.Writer()CVE-2025-65637 · GHSA-4F99-4Q7P-P3GHVersion ranges need review. github.com/sirupsen/logrusConfidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9 GoRed Hat High Fix reported
ReDoS in Sec-Websocket-Protocol headerCVE-2021-32640 · GHSA-6FC8-4GX4-V693 wsOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat Medium Fix reported
Regular Expression Denial of Service (ReDoS) in lodashCVE-2020-28500 · GHSA-29MW-WPGM-HMR9 lodash-eslodash.trim npmRed HatRubyGems Medium Fix reported