Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/multicluster-observability-rhel9-operator
Red Hat
· Package
19 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
compress zstd: Panic on two-block frames
CVE-2026-116591 · GHSA-FPMH-FRQ8-7RJ8
github.com/klauspost/compress/zstd
github.com/klauspost/compress
Go
Red Hat
High
Fix reported
2026-11-06
Memory exhaustion in query parameter parsing in net/url
CVE-2025-61726 · GO-2026-4341
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
Go
Red Hat
High
Fix reported
2026-10-03
Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html
CVE-2026-25681 · GO-2026-5029
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
High
Fix reported
2026-09-22
Root escape via symlink plus trailing slash in os
CVE-2026-39822 · GO-2026-4970
stdlib
ExternalDNS Operator/edo/external-dns-rhel9-operator
Go
Red Hat
High
Fix reported
2026-09-16
Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder
CVE-2026-89090 · GHSA-XMRV-PMRH-HHX2
Version ranges need review.
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream
github.com/aws/aws-sdk-go-v2/service/bedrockagentcore
Go
Red Hat
Medium
Fix reported
2026-09-12
OpenTelemetry-Go: Unsynchronized baggage map can panic under concurrent access
CVE-2026-45404 · GHSA-42CJ-99W8-CP2P
Version ranges need review.
go.opentelemetry.io/otel/bridge/opentracing
Multicluster Global Hub/multicluster-globalhub/multicluster-globalhub-grafana-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap
CVE-2026-41568 · GHSA-VP62-88P7-QQF5
Version ranges need review.
github.com/docker/docker
github.com/moby/moby/v2
Go
Red Hat
Medium
Fix reported
2026-09-10
Go Net HTML parser is vulnerable to denial of service
CVE-2026-25680 · GHSA-5CV4-JP36-H3MW
Version ranges need review.
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
gRPC-Go has an authorization bypass via missing leading slash in :path
CVE-2026-33186 · GHSA-P77J-4MVH-X3M3
Version ranges need review.
google.golang.org/grpc
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Critical
Fix reported
2026-09-10
golang.org/x/net/html has a Quadratic Parsing Complexity issue
CVE-2025-47911 · GHSA-W4GW-W5JQ-G9JH
golang.org/x/net/html
golang.org/x/net
Go
Red Hat
Medium
Fix reported
2026-09-10
golang.org/x/net vulnerable to Cross-site Scripting
CVE-2025-22872 · GHSA-VVGC-356P-C3XW
Version ranges need review.
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8
Go
Red Hat
Medium
Fix reported
2026-09-10
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net
CVE-2025-22870 · GHSA-QXP5-GWG8-XV66
Version ranges need review.
golang.org/x/net
stdlib
Go
Red Hat
Medium
Fix reported
2026-09-10
Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations
CVE-2024-51744 · GHSA-29WX-VH33-7X7R
Version ranges need review.
github.com/golang-jwt/jwt/v4
Builds for Red Hat OpenShift/openshift-builds-triggers-container
Go
Red Hat
Low
Fix reported
2026-09-10
x/crypto/ssh vulnerable to panic via malformed packets
CVE-2021-43565 · GHSA-GWC9-M7RH-J2WW
Version ranges need review.
golang.org/x/crypto
Migration Toolkit for Containers/rhmtc/openshift-migration-velero-rhel8
Go
Red Hat
High
Fix reported
2026-09-10
Excessive resource consumption when printing error string for host certificate validation in crypto/x509
CVE-2025-61729 · GO-2025-4155
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
Go
Red Hat
High
Fix reported
2026-08-14
Incorrect Authorization in NATS nats-server
CVE-2022-24450 · GHSA-G6W6-R76C-28J7
Version ranges need review.
github.com/nats-io/nats-server/v2
github.com/nats-io/nats-server
Go
Red Hat
High
Fix reported
2026-03-03
Panic due to large inputs affecting P-256 curves in crypto/elliptic
CVE-2022-28327 · GO-2022-0435
stdlib
Migration Toolkit for Containers/cpma
Go
Red Hat
Medium
Fix reported
2024-05-20
Stack overflow from a large amount of PEM data in encoding/pem
CVE-2022-24675 · GO-2022-0433
stdlib
Migration Toolkit for Containers/cpma
Go
Red Hat
Medium
Fix reported
2024-05-20
Session tickets lack random ticket_age_add in crypto/tls
CVE-2022-30629 · GO-2022-0531
stdlib
Migration Toolkit for Containers/cpma
Go
Red Hat
Low
Fix reported
2024-05-20
