Security
فارسی
All products

Red Hat Trusted Artifact Signer/rhtas/policy-controller-rhel9-operator

Red Hat · Package
18 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
compress zstd: Panic on two-block framesCVE-2026-116591 · GHSA-FPMH-FRQ8-7RJ8 github.com/klauspost/compress/zstdgithub.com/klauspost/compress GoRed Hat High Fix reported
Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/htmlCVE-2026-42502 · GO-2026-5027 golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
Invoking duplicate attributes can cause XSS in golang.org/x/net/htmlCVE-2026-27136 · GO-2026-5030 golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat High Fix reported
containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of ServiceCVE-2026-53495 · GHSA-7JXH-36Q5-GCQVVersion ranges need review. github.com/containerd/containerd/v2github.com/containerd/containerd GoRed Hat Medium Fix reported
sigstore-go has a multi-log threshold bypass via single compromised logCVE-2026-49834 · GHSA-9VCR-P3RJ-Q5Q6Version ranges need review. github.com/sigstore/sigstore-goOpenShift Pipelines/openshift-pipelines/pipelines-chains-controller-rhel8 GoRed Hat Medium Fix reported
oras-go has file store write outside workingDir via symlink traversalCVE-2026-50162 · GHSA-8XWF-RJM4-XVHVVersion ranges need review. oras.land/oras-go/v2Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
containerd CRI checkpoint restore CDI annotation smugglingCVE-2026-53492 · GHSA-33VJ-92QQ-66HCVersion ranges need review. github.com/containerd/containerd/v2github.com/containerd/containerd GoRed Hat High Fix reported
containerd CRI server: Host memory exhaustion through Attach goroutine leakCVE-2025-64329 · GHSA-M6HQ-P25P-FFR2Version ranges need review. github.com/containerd/containerd/v2github.com/containerd/containerd GoRed Hat Medium Fix reported
Go Net HTML parser is vulnerable to denial of serviceCVE-2026-25680 · GHSA-5CV4-JP36-H3MWVersion ranges need review. golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
Go JOSE Panics in JWE decryptionCVE-2026-34986 · GHSA-78H2-9FRX-2JM8Version ranges need review. github.com/go-jose/go-jose/v3github.com/go-jose/go-jose/v4 GoRed Hat High Fix reported
gRPC-Go has an authorization bypass via missing leading slash in :pathCVE-2026-33186 · GHSA-P77J-4MVH-X3M3Version ranges need review. google.golang.org/grpcAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Critical Fix reported
golang.org/x/net/html has a Quadratic Parsing Complexity issueCVE-2025-47911 · GHSA-W4GW-W5JQ-G9JH golang.org/x/net/htmlgolang.org/x/net GoRed Hat Medium Fix reported
go-tuf Path Traversal in TAP 4 Multirepo Client Allows Arbitrary File Write via Malicious Repository NamesCVE-2026-24686 · GHSA-JQC5-W2XX-5VQ4Version ranges need review. github.com/theupdateframework/go-tuf/v2OpenShift Pipelines/openshift-pipelines/pipelines-chains-controller-rhel9 GoRed Hat Medium Fix reported
go-tuf improperly validates the configured threshold for delegationsCVE-2026-23992 · GHSA-FPHV-W9FQ-2525Version ranges need review. github.com/theupdateframework/go-tuf/v2OpenShift Pipelines/openshift-pipelines/pipelines-chains-controller-rhel9 GoRed Hat Medium Fix reported
sigstore legacy TUF client allows for arbitrary file writes with target cache path traversalCVE-2026-24137 · GHSA-FCV2-XGW5-PQXFVersion ranges need review. github.com/sigstore/sigstoreAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
go-tuf affected by client DoS via malformed server responseCVE-2026-23991 · GHSA-846P-JG2W-W324Version ranges need review. github.com/theupdateframework/go-tuf/v2OpenShift Pipelines/openshift-pipelines/pipelines-chains-controller-rhel9 GoRed Hat Medium Fix reported
Infinite parsing loop in golang.org/x/netCVE-2025-58190 · GO-2026-4441 golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 GoRed Hat Medium Fix reported
squirrel: Squirrel: Heap-based buffer overflow allows local denial of serviceCVE-2026-8261 Deployment Validation Operator/dvo/deployment-validation-rhel8-operatorMCP Server for Red Hat OpenShift/openshift-mcp-beta/openshift-mcp-server-rhel9 Red Hat Medium No fix reported