| Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream DecoderCVE-2026-89090 · GHSA-XMRV-PMRH-HHX2Version ranges need review. |
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstreamgithub.com/aws/aws-sdk-go-v2/service/bedrockagentcore |
GoRed Hat |
Medium
|
Fix reported |
|
| containerd CRI server: Host memory exhaustion through Attach goroutine leakCVE-2025-64329 · GHSA-M6HQ-P25P-FFR2Version ranges need review. |
github.com/containerd/containerd/v2github.com/containerd/containerd |
GoRed Hat |
Medium
|
Fix reported |
|
| pip's fallback tar extraction doesn't check symbolic links point to extraction directoryCVE-2025-8869 · GHSA-4XH5-X5GV-QWPHVersion ranges need review. |
pipMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-api-rhel9 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| golang.org/x/net vulnerable to Cross-site ScriptingCVE-2025-22872 · GHSA-VVGC-356P-C3XWVersion ranges need review. |
golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 |
GoRed Hat |
Medium
|
Fix reported |
|
| HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/netCVE-2025-22870 · GHSA-QXP5-GWG8-XV66Version ranges need review. |
golang.org/x/netstdlib |
GoRed Hat |
Medium
|
Fix reported |
|
| Moby (Docker Engine) started with non-empty inheritable Linux process capabilitiesCVE-2022-24769 · GHSA-2MM7-X5H6-5PVQVersion ranges need review. |
github.com/docker/dockergithub.com/moby/moby |
GoRed Hat |
Medium
|
Fix reported |
|
| Supplementary groups are not set up properly in github.com/containerd/containerdCVE-2023-25173 · GHSA-HMFX-3PCX-653PVersion ranges need review. |
github.com/containerd/containerdCryostat 2/cryostat-tech-preview/cryostat-rhel8-operator |
GoRed Hat |
Medium
|
Fix reported |
|
| Uncontrolled Resource Consumption in promhttpCVE-2022-21698 · GHSA-CG3Q-J54F-5P7PVersion ranges need review. |
github.com/prometheus/client_golangCost Management Metrics Operator/costmanagement-metrics-operator-container |
GoRed Hat |
High
|
Fix reported |
|
| Excessive resource consumption when printing error string for host certificate validation in crypto/x509CVE-2025-61729 · GO-2025-4155 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 |
GoRed Hat |
High
|
Fix reported |
|
| Incorrect sanitization of forwarded query parameters in net/http/httputilCVE-2022-2880 · GO-2022-1038 |
stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 |
GoRed Hat |
Medium
|
Fix reported |
|
| Memory exhaustion when compiling regular expressions in regexp/syntaxCVE-2022-41715 · GO-2022-1039 |
stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 |
GoRed Hat |
Medium
|
Fix reported |
|
| Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictionsCVE-2022-36109 · GHSA-RC4R-WH2Q-Q6C4Version ranges need review. |
github.com/docker/dockerMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 |
GoRed Hat |
Medium
|
Fix reported |
|
| golang.org/x/net/http2 vulnerable to possible excessive memory growthCVE-2022-41717 · GHSA-XRJJ-MJ9H-534MVersion ranges need review. |
golang.org/x/net/http2golang.org/x/net |
GoRed Hat |
Medium
|
Fix reported |
|
| golang.org/x/net/http2 Denial of Service vulnerabilityCVE-2022-27664 · GHSA-69CG-P879-7622Version ranges need review. |
golang.org/x/net/http2golang.org/x/net |
GoRed Hat |
High
|
Fix reported |
|
| Gin mishandles a wildcard at the end of an origin stringCVE-2019-25211 · GHSA-869C-J7WC-8JQVVersion ranges need review. |
github.com/gin-contrib/corsgithub.com/gin-gonic/gin |
GoRed Hat |
Critical
|
Fix reported |
|
| go.mongodb.org/mongo-driver improperly validates cstrings when marshalling Go objects into BSONCVE-2021-20329 · GHSA-F6MQ-5M25-4R72Version ranges need review. |
go.mongodb.org/mongo-driverMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 |
GoRed Hat |
Medium
|
Fix reported |
|
| Panic due to large inputs affecting P-256 curves in crypto/ellipticCVE-2022-28327 · GO-2022-0435 |
stdlibMigration Toolkit for Containers/cpma |
GoRed Hat |
Medium
|
Fix reported |
|
| Stack overflow from a large amount of PEM data in encoding/pemCVE-2022-24675 · GO-2022-0433 |
stdlibMigration Toolkit for Containers/cpma |
GoRed Hat |
Medium
|
Fix reported |
|
| Session tickets lack random ticket_age_add in crypto/tlsCVE-2022-30629 · GO-2022-0531 |
stdlibMigration Toolkit for Containers/cpma |
GoRed Hat |
Low
|
Fix reported |
|
| Stack exhaustion when unmarshaling certain documents in encoding/xmlCVE-2022-30633 · GO-2022-0523 |
stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 |
GoRed Hat |
Medium
|
Fix reported |
|
