Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Ceph Storage 6/rhceph/rhceph-promtail-rhel9
Red Hat
· Package
13 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSON
CVE-2024-24786 · GHSA-8R3F-844C-MC37
Version ranges need review.
google.golang.org/protobuf/encoding/protojson
google.golang.org/protobuf/internal/encoding/json
Go
Red Hat
Medium
Fix reported
2026-10-14
containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of Service
CVE-2026-53495 · GHSA-7JXH-36Q5-GCQV
Version ranges need review.
github.com/containerd/containerd/v2
github.com/containerd/containerd
Go
Red Hat
Medium
Fix reported
2026-09-17
containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull
CVE-2026-53488 · GHSA-XHF5-7WJV-PQXP
Version ranges need review.
github.com/containerd/containerd/v2
github.com/containerd/containerd
Go
Red Hat
High
Fix reported
2026-09-10
containerd CRI checkpoint restore CDI annotation smuggling
CVE-2026-53492 · GHSA-33VJ-92QQ-66HC
Version ranges need review.
github.com/containerd/containerd/v2
github.com/containerd/containerd
Go
Red Hat
High
Fix reported
2026-09-10
Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap
CVE-2026-41568 · GHSA-VP62-88P7-QQF5
Version ranges need review.
github.com/docker/docker
github.com/moby/moby/v2
Go
Red Hat
Medium
Fix reported
2026-09-10
Grafana Loki Path Traversal - CVE-2021-36156 Bypass
CVE-2026-21726 · GHSA-497X-RRR9-68JP
Version ranges need review.
github.com/grafana/loki/v3
github.com/grafana/loki
Go
Red Hat
Medium
Fix reported
2026-09-10
Arbitrary host CRI log file read via symlink following in CRI checkpoint restore
CVE-2026-53489 · GHSA-RGH6-RFWX-V388
Version ranges need review.
github.com/containerd/containerd/v2
github.com/containerd/containerd
Go
Red Hat
High
Fix reported
2026-09-10
Docker: Race condition in docker cp allows bind mount redirection to host path
CVE-2026-42306 · GHSA-RG2X-37C3-W2RH
Version ranges need review.
github.com/docker/docker
github.com/moby/moby/v2
Go
Red Hat
High
Fix reported
2026-09-10
Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations
CVE-2024-51744 · GHSA-29WX-VH33-7X7R
Version ranges need review.
github.com/golang-jwt/jwt/v4
Builds for Red Hat OpenShift/openshift-builds-triggers-container
Go
Red Hat
Low
Fix reported
2026-09-10
Prometheus Azure AD remote write OAuth client secret exposed via config API
CVE-2026-42151 · GHSA-WG65-39GG-5WFJ
Version ranges need review.
github.com/prometheus/prometheus
File Integrity Operator/compliance/openshift-file-integrity-operator-bundle
Go
Red Hat
High
Fix reported
2026-09-09
etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline
CVE-2026-73500 · GHSA-6VCH-Q96H-7GC3
go.etcd.io/etcd/client/pkg/v3
go.etcd.io/etcd/v3
Go
Red Hat
High
Fix reported
2026-08-20
Prometheus: Remote read endpoint allows denial of service via crafted snappy payload
CVE-2026-42154 · GHSA-8RM2-7QQF-34QM
Version ranges need review.
github.com/prometheus/prometheus/v2
github.com/prometheus/prometheus
Go
Red Hat
High
Fix reported
2026-07-14
github.com/hashicorp/memberlist: HashiCorp memberlist: Denial of Service via push/pull state handling
CVE-2026-14362
Red Hat Ceph Storage 5/rhceph/rhceph-5-dashboard-rhel8
Red Hat Ceph Storage 5/rhceph/snmp-notifier-rhel8
Red Hat
High
No fix reported
Not recorded
