Red Hat OpenShift Container Platform 4/openshift4/ose-cluster-ingress-rhel9-operator

Red Hat · Package

11 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
compress zstd: Panic on two-block framesCVE-2026-116591 · GHSA-FPMH-FRQ8-7RJ8	github.com/klauspost/compress/zstd github.com/klauspost/compress	GoRed Hat	High	Fix reported	2026-11-06
Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSONCVE-2024-24786 · GHSA-8R3F-844C-MC37Version ranges need review.	google.golang.org/protobuf/encoding/protojson google.golang.org/protobuf/internal/encoding/json	GoRed Hat	Medium	Fix reported	2026-10-14
Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/htmlCVE-2026-42502 · GO-2026-5027	golang.org/x/net Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9	GoRed Hat	Medium	Fix reported	2026-09-22
containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of ServiceCVE-2026-53495 · GHSA-7JXH-36Q5-GCQVVersion ranges need review.	github.com/containerd/containerd/v2 github.com/containerd/containerd	GoRed Hat	Medium	Fix reported	2026-09-17
Go Net HTML parser is vulnerable to denial of serviceCVE-2026-25680 · GHSA-5CV4-JP36-H3MWVersion ranges need review.	golang.org/x/net Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9	GoRed Hat	Medium	Fix reported	2026-09-10
golang.org/x/net/html has a Quadratic Parsing Complexity issueCVE-2025-47911 · GHSA-W4GW-W5JQ-G9JH	golang.org/x/net/html golang.org/x/net	GoRed Hat	Medium	Fix reported	2026-09-10
Uncontrolled Resource Consumption in promhttpCVE-2022-21698 · GHSA-CG3Q-J54F-5P7PVersion ranges need review.	github.com/prometheus/client_golang Cost Management Metrics Operator/costmanagement-metrics-operator-container	GoRed Hat	High	Fix reported	2026-09-10
Authorization bypass in github.com/dgrijalva/jwt-goCVE-2020-26160 · GHSA-W73W-5M7G-F7QCVersion ranges need review.	github.com/dgrijalva/jwt-go/v4 github.com/dgrijalva/jwt-go	GoRed Hat	High	Fix reported	2026-07-08
Infinite parsing loop in golang.org/x/netCVE-2025-58190 · GO-2026-4441	golang.org/x/net Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	GoRed Hat	Medium	Fix reported	2026-05-15
istio: Istio: Firewall rule injection via annotation allows limited integrity impactCVE-2026-23766	ExternalDNS Operator/edo/external-dns-rhel8 ExternalDNS Operator/edo/external-dns-rhel9	Red Hat	Unknown	No fix reported	Not recorded
go.mongodb.org/mongo-driver: go.mongodb.org/mongo-driver/v2: MongoDB Go Driver: Data deletion via query-operator injection in GridFS file IDsCVE-2026-88031	Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	Red Hat	High	No fix reported	Not recorded