Security
فارسی
All products

Multicluster Engine for Kubernetes/multicluster-engine/registration-rhel9

Red Hat · Package
16 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idnaCVE-2026-39821 · GO-2026-5026 golang.org/x/netstdlib GoRed Hat High Fix reported
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistecCVE-2025-22866 · GO-2025-3447 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 GoRed Hat Medium Fix reported
Infinite loop on invalid input in golang.org/x/textCVE-2026-56852 · GO-2026-5970 golang.org/x/textAWS Load Balancer Operator/albo/aws-load-balancer-rhel9-operator GoRed Hat High Fix reported
Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream DecoderCVE-2026-89090 · GHSA-XMRV-PMRH-HHX2Version ranges need review. github.com/aws/aws-sdk-go-v2/aws/protocol/eventstreamgithub.com/aws/aws-sdk-go-v2/service/bedrockagentcore GoRed Hat Medium Fix reported
Malicious module proxy can bypass checksum database in cmd/goCVE-2026-42501 · GO-2026-4984 toolchainExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 GoRed Hat Medium Fix reported
Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessageCVE-2026-46600 · GO-2026-5942 golang.org/x/netstdlib GoRed Hat High Fix reported
Excessive resource consumption when printing error string for host certificate validation in crypto/x509CVE-2025-61729 · GO-2025-4155 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 GoRed Hat High Fix reported
Egress Policy Bypass via DNS over HTTPS (DoH) in Harden-Runner (Community Tier)CVE-2026-32947 · GHSA-46G3-37RH-V698 step-security/harden-runnerExternal Secrets Operator for Red Hat OpenShift/external-secrets-operator/bitwarden-sdk-server-rhel9 GitHub ActionsRed Hat Medium Fix reported
Egress Policy Bypass via DNS over TCP in Harden-Runner (Community Tier)CVE-2026-32946 · GHSA-G699-3X6G-WM3G step-security/harden-runnerExternal Secrets Operator for Red Hat OpenShift/external-secrets-operator/bitwarden-sdk-server-rhel9 GitHub ActionsRed Hat Medium Fix reported
Harden-Runner: Bypassing Logging of Outbound Connections Using sendto, sendmsg, and sendmmsg in Harden-Runner (Community Tier)CVE-2026-25598 · GHSA-CPMJ-H4F6-R6PQ step-security/harden-runnerExternal Secrets Operator for Red Hat OpenShift/external-secrets-operator/bitwarden-sdk-server-rhel9 GitHub ActionsRed Hat Medium Fix reported
Sensitive headers incorrectly sent after cross-domain redirect in net/httpCVE-2024-45336 · GO-2025-3420 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 GoRed Hat Medium Fix reported
Helm vulnerable to Code Injection through malicious chart.yaml contentCVE-2025-53547 · GHSA-557J-XG8C-Q2MMVersion ranges need review. helm.sh/helm/v3Deployment Validation Operator/dvo/deployment-validation-operator-bundle GoRed Hat High Fix reported
Helm Charts with Specific JSON Schema Values Can Cause Memory ExhaustionCVE-2025-55199 · GHSA-9H84-QMV7-982PVersion ranges need review. helm.sh/helm/v3helm.sh/helm GoRed Hat Medium Fix reported
Helm May Panic Due To Incorrect YAML ContentCVE-2025-55198 · GHSA-F9F8-9PMF-XV68Version ranges need review. helm.sh/helm/v3helm.sh/helm GoRed Hat Medium Fix reported
openssl: Out-of-bounds read & write in RFC 3211 KEK UnwrapCVE-2025-9230 Multicluster Engine for Kubernetes/multicloud-operators-foundationMulticluster Engine for Kubernetes/multicluster-engine/hypershift-addon-rhel9-operator Red Hat Medium No fix reported
k8s.io/kubectl: Kubernetes kubectl: Arbitrary file write via path traversal on WindowsCVE-2026-19444 DPU kit for NVIDIA/dpu-kit-for-nvidia/must-gather-rhel10Multicluster Engine for Kubernetes/multicluster-engine/registration-rhel9 Red Hat Medium No fix reported