Red Hat OpenShift Container Platform 4/openshift4/ose-local-storage-diskmaker

Red Hat · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/netCVE-2026-33814 · GO-2026-4918	golang.org/x/net stdlib	GoRed Hat	High	Fix reported	2026-10-16
Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/htmlCVE-2026-42502 · GO-2026-5027	golang.org/x/net Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9	GoRed Hat	Medium	Fix reported	2026-09-22
Invoking duplicate attributes can cause XSS in golang.org/x/net/htmlCVE-2026-27136 · GO-2026-5030	golang.org/x/net Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9	GoRed Hat	High	Fix reported	2026-09-22
Go Net HTML parser is vulnerable to denial of serviceCVE-2026-25680 · GHSA-5CV4-JP36-H3MWVersion ranges need review.	golang.org/x/net Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9	GoRed Hat	Medium	Fix reported	2026-09-10
golang.org/x/net/html has a Quadratic Parsing Complexity issueCVE-2025-47911 · GHSA-W4GW-W5JQ-G9JH	golang.org/x/net/html golang.org/x/net	GoRed Hat	Medium	Fix reported	2026-09-10
Logrus is vulnerable to DoS when using Entry.Writer()CVE-2025-65637 · GHSA-4F99-4Q7P-P3GHVersion ranges need review.	github.com/sirupsen/logrus Confidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9	GoRed Hat	High	Fix reported	2026-09-10
kube-controller-manager: kube-controller-manager: StatefulSet and ControllerRevision write permissions allow cross-namespace pod creationCVE-2026-2270	Logical Volume Manager Storage/lvms4/lvms-must-gather-rhel9 Logical Volume Manager Storage/lvms4/lvms-operator-bundle	Red Hat	Medium	No fix reported	Not recorded