All products

Node HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel8

Red Hat · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of ServiceCVE-2026-53495 · GHSA-7JXH-36Q5-GCQVVersion ranges need review. github.com/containerd/containerd/v2github.com/containerd/containerd GoRed Hat Medium Fix reported
go-git: Worktree operations may follow symlinksCVE-2026-71556 · GHSA-HC8V-WWC9-VGXMVersion ranges need review. github.com/go-git/go-git/v5github.com/go-git/go-git/v6 GoRed Hat High Fix reported
BuildKit has a possible runtime DoS via unbounded group parsingCVE-2026-61712 · GHSA-72X6-4J93-7W86Version ranges need review. github.com/moby/buildkitAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Low Fix reported
BuildKit: Custom frontend could bypass Seccomp/AppArmorCVE-2026-61711 · GHSA-7236-3392-C5C6Version ranges need review. github.com/moby/buildkitAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
go-git: Malicious reference names may modify files outside the reference storageCVE-2026-71557 · GHSA-QGQ7-7HM3-Q39JVersion ranges need review. github.com/go-git/go-git/v5github.com/go-git/go-git/v6 GoRed Hat Medium Fix reported
github.com/moby/buildkit: BuildKit: Denial of Service via duplicate Git source metadata resolutionCVE-2026-121522 Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9 Red Hat Medium No fix reported
buildkit: github.com/moby/buildkit: BuildKit: File escape vulnerabilityCVE-2026-15789 Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9 Red Hat Medium No fix reported
github.com/moby/buildkit: BuildKit: Denial of Service via malicious client requestCVE-2026-15792 Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9Compliance Operator/compliance/openshift-compliance-must-gather-rhel8 Red Hat Medium No fix reported
github.com/moby/buildkit: BuildKit: File escape vulnerability allows unauthorized file modificationCVE-2026-75593 Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9Compliance Operator/compliance/openshift-compliance-must-gather-rhel8 Red Hat Medium No fix reported