MCP Server for Red Hat OpenShift/openshift-mcp-beta/openshift-mcp-server-rhel9

Red Hat · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Infinite loop on invalid input in golang.org/x/textCVE-2026-56852 · GO-2026-5970	golang.org/x/text AWS Load Balancer Operator/albo/aws-load-balancer-rhel9-operator	GoRed Hat	High	Fix reported	2026-09-23
containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of ServiceCVE-2026-53495 · GHSA-7JXH-36Q5-GCQVVersion ranges need review.	github.com/containerd/containerd/v2 github.com/containerd/containerd	GoRed Hat	Medium	Fix reported	2026-09-17
oras-go has file store write outside workingDir via symlink traversalCVE-2026-50162 · GHSA-8XWF-RJM4-XVHVVersion ranges need review.	oras.land/oras-go/v2 Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9	GoRed Hat	Medium	Fix reported	2026-09-10
containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pullCVE-2026-53488 · GHSA-XHF5-7WJV-PQXPVersion ranges need review.	github.com/containerd/containerd/v2 github.com/containerd/containerd	GoRed Hat	High	Fix reported	2026-09-10
containerd CRI checkpoint restore CDI annotation smugglingCVE-2026-53492 · GHSA-33VJ-92QQ-66HCVersion ranges need review.	github.com/containerd/containerd/v2 github.com/containerd/containerd	GoRed Hat	High	Fix reported	2026-09-10
Arbitrary host CRI log file read via symlink following in CRI checkpoint restoreCVE-2026-53489 · GHSA-RGH6-RFWX-V388Version ranges need review.	github.com/containerd/containerd/v2 github.com/containerd/containerd	GoRed Hat	High	Fix reported	2026-09-10
squirrel: Squirrel: Heap-based buffer overflow allows local denial of serviceCVE-2026-8261	Deployment Validation Operator/dvo/deployment-validation-rhel8-operator MCP Server for Red Hat OpenShift/openshift-mcp-beta/openshift-mcp-server-rhel9	Red Hat	Medium	No fix reported	Not recorded