OpenShift Serverless/openshift-serverless-1/kn-serving-controller-rhel9

Red Hat · Package

6 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustionCVE-2026-54462 · GHSA-2HW4-C9M4-F2FJVersion ranges need review.	knative.dev/pkg Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel10	GoRed Hat	Medium	Fix reported	2026-11-06
Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream DecoderCVE-2026-89090 · GHSA-XMRV-PMRH-HHX2Version ranges need review.	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream github.com/aws/aws-sdk-go-v2/service/bedrockagentcore	GoRed Hat	Medium	Fix reported	2026-09-12
Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swapCVE-2026-41568 · GHSA-VP62-88P7-QQF5Version ranges need review.	github.com/docker/docker github.com/moby/moby/v2	GoRed Hat	Medium	Fix reported	2026-09-10
Docker: Race condition in docker cp allows bind mount redirection to host pathCVE-2026-42306 · GHSA-RG2X-37C3-W2RHVersion ranges need review.	github.com/docker/docker github.com/moby/moby/v2	GoRed Hat	High	Fix reported	2026-09-10
gRPC-Go has an authorization bypass via missing leading slash in :pathCVE-2026-33186 · GHSA-P77J-4MVH-X3M3Version ranges need review.	google.golang.org/grpc Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9	GoRed Hat	Critical	Fix reported	2026-09-10
cert-manager-controller DoS via Specially Crafted DNS ResponseCVE-2026-25518 · GHSA-GX3X-VQ4P-MHHVVersion ranges need review.	github.com/cert-manager/cert-manager Cryostat 4/cryostat/cryostat-rhel9-operator	GoRed Hat	Medium	Fix reported	2026-03-16