Red Hat OpenShift Container Platform 4/openshift4/noderesourcetopology-scheduler-rhel9

Red Hat · Package

4 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
SpdyStream: DOS on CRICVE-2026-35469 · GHSA-PC3F-X583-G7J2Version ranges need review.	github.com/moby/spdystream Dynamic Accelerator Slicer Operator for Red Hat OpenShift/dynamic-accelerator-slicer-tech-preview/instaslice-daemonset-rhel9	GoRed Hat	High	Fix reported	2026-09-10
kube-controller-manager is vulnerable to half-blind Server Side Request Forgery through in-tree Portworx StorageClassCVE-2025-13281 · GHSA-R6J8-C6R2-37RRVersion ranges need review.	k8s.io/kubernetes Builds for Red Hat OpenShift/openshift-builds/openshift-builds-shared-resource-rhel9	GoRed Hat	Medium	Fix reported	2026-09-10
gRPC-Go has an authorization bypass via missing leading slash in :pathCVE-2026-33186 · GHSA-P77J-4MVH-X3M3Version ranges need review.	google.golang.org/grpc Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9	GoRed Hat	Critical	Fix reported	2026-09-10
kube-controller-manager: kube-controller-manager: StatefulSet and ControllerRevision write permissions allow cross-namespace pod creationCVE-2026-2270	Logical Volume Manager Storage/lvms4/lvms-must-gather-rhel9 Logical Volume Manager Storage/lvms4/lvms-operator-bundle	Red Hat	Medium	No fix reported	Not recorded