Red Hat OpenShift Container Platform 4/openshift4/ose-gcp-cloud-controller-manager-rhel9

Red Hat · Package

8 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
compress zstd: Panic on two-block framesCVE-2026-116591 · GHSA-FPMH-FRQ8-7RJ8	github.com/klauspost/compress/zstd github.com/klauspost/compress	GoRed Hat	High	Fix reported	2026-11-06
SpdyStream: DOS on CRICVE-2026-35469 · GHSA-PC3F-X583-G7J2Version ranges need review.	github.com/moby/spdystream Dynamic Accelerator Slicer Operator for Red Hat OpenShift/dynamic-accelerator-slicer-tech-preview/instaslice-daemonset-rhel9	GoRed Hat	High	Fix reported	2026-09-10
kube-controller-manager is vulnerable to half-blind Server Side Request Forgery through in-tree Portworx StorageClassCVE-2025-13281 · GHSA-R6J8-C6R2-37RRVersion ranges need review.	k8s.io/kubernetes Builds for Red Hat OpenShift/openshift-builds/openshift-builds-shared-resource-rhel9	GoRed Hat	Medium	Fix reported	2026-09-10
gRPC-Go has an authorization bypass via missing leading slash in :pathCVE-2026-33186 · GHSA-P77J-4MVH-X3M3Version ranges need review.	google.golang.org/grpc Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9	GoRed Hat	Critical	Fix reported	2026-09-10
Node Denial of Service via kubelet Checkpoint APICVE-2025-0426 · GHSA-JGFP-53C3-624WVersion ranges need review.	k8s.io/kubernetes Builds for Red Hat OpenShift/openshift-builds/openshift-builds-shared-resource-rhel9	GoRed Hat	Medium	Fix reported	2026-09-10
Supplementary groups are not set up properly in github.com/containerd/containerdCVE-2023-25173 · GHSA-HMFX-3PCX-653PVersion ranges need review.	github.com/containerd/containerd Cryostat 2/cryostat-tech-preview/cryostat-rhel8-operator	GoRed Hat	Medium	Fix reported	2026-09-10
github.com/grpc-ecosystem/grpc-gateway: github.com/grpc-ecosystem/grpc-gateway/v2: grpc-gateway: Access control bypass via X-HTTP-Method-Override headerCVE-2026-37236	Multicluster Global Hub/multicluster-globalhub/multicluster-globalhub-grafana-rhel9 OpenShift Serverless/openshift-serverless-1/kn-plugin-event-sender-rhel9	Red Hat	Medium	No fix reported	Not recorded
kube-controller-manager: kube-controller-manager: StatefulSet and ControllerRevision write permissions allow cross-namespace pod creationCVE-2026-2270	Logical Volume Manager Storage/lvms4/lvms-must-gather-rhel9 Logical Volume Manager Storage/lvms4/lvms-operator-bundle	Red Hat	Medium	No fix reported	Not recorded