Security
فارسی
All products

Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/acm-multicluster-observability-addon-rhel9

Red Hat · Package
14 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Echo: Rejected WebSocket upgrades can bypass Echo route-level access controlsCVE-2026-118264 · GHSA-CXF3-9H37-7RR8Version ranges need review. github.com/labstack/echo/v4github.com/labstack/echo/v5 GoRed Hat Critical Fix reported
Memory exhaustion in query parameter parsing in net/urlCVE-2025-61726 · GO-2026-4341 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 GoRed Hat High Fix reported
OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is fullCVE-2026-81872 · GHSA-HJF4-FPHR-2H65Version ranges need review. go.opentelemetry.io/otel/sdk/logAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
Perses's project query parameter authorization bypass exposes cross-project resourcesCVE-2026-63458 · GHSA-CJGJ-2FWF-4C2WVersion ranges need review. github.com/perses/persesRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/acm-multicluster-observability-addon-rhel9 GoRed Hat High Fix reported
OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinningCVE-2026-81871 · GHSA-W34Q-CM8F-9C5XVersion ranges need review. go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpcAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
OpenTelemetry Operator for Kubernetes's ServiceMonitor bearerTokenFile reads arbitrary local file and sends contents as bearer authCVE-2026-47701 · GHSA-CXH2-4639-VMC5Version ranges need review. github.com/open-telemetry/opentelemetry-operatorRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/acm-multicluster-observability-addon-rhel9 GoRed Hat High Fix reported
Go JOSE Panics in JWE decryptionCVE-2026-34986 · GHSA-78H2-9FRX-2JM8Version ranges need review. github.com/go-jose/go-jose/v3github.com/go-jose/go-jose/v4 GoRed Hat High Fix reported
gRPC-Go has an authorization bypass via missing leading slash in :pathCVE-2026-33186 · GHSA-P77J-4MVH-X3M3Version ranges need review. google.golang.org/grpcAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Critical Fix reported
Zitadel is missing enforcement of organization scopesCVE-2026-33132 · GHSA-G2PF-WW5M-2R9MVersion ranges need review. github.com/zitadel/zitadelRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/acm-multicluster-observability-addon-rhel9 GoRed Hat Medium Fix reported
Excessive resource consumption when printing error string for host certificate validation in crypto/x509CVE-2025-61729 · GO-2025-4155 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 GoRed Hat High Fix reported
Sensitive headers incorrectly sent after cross-domain redirect in net/httpCVE-2024-45336 · GO-2025-3420 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 GoRed Hat Medium Fix reported
Helm Charts with Specific JSON Schema Values Can Cause Memory ExhaustionCVE-2025-55199 · GHSA-9H84-QMV7-982PVersion ranges need review. helm.sh/helm/v3helm.sh/helm GoRed Hat Medium Fix reported
Helm May Panic Due To Incorrect YAML ContentCVE-2025-55198 · GHSA-F9F8-9PMF-XV68Version ranges need review. helm.sh/helm/v3helm.sh/helm GoRed Hat Medium Fix reported
multicluster-observability-addon: multicluster-observability-addon: possible unauthenticated debug/metrics endpoint via cmdfactory.NewControllerCommandConfig (confirmed exposed by engineering)CVE-2026-93685 Red Hat Advanced Cluster Management for Kubernetes 2/redhat-user-workloads/multicluster-observability-addon-acm-213Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/acm-multicluster-observability-addon-rhel9 Red Hat Medium No fix reported