Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Openshift Data Foundation 4/odf4/ocs-rhel9-operator
Red Hat
· Package
13 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec
CVE-2025-22866 · GO-2025-3447
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8
Go
Red Hat
Medium
Fix reported
2026-09-29
Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder
CVE-2026-89090 · GHSA-XMRV-PMRH-HHX2
Version ranges need review.
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream
github.com/aws/aws-sdk-go-v2/service/bedrockagentcore
Go
Red Hat
Medium
Fix reported
2026-09-12
CloudNativePG's metrics exporter allows privilege escalation to PostgreSQL superuser and OS RCE
CVE-2026-44477 · GHSA-423P-G724-FR39
Version ranges need review.
github.com/cloudnative-pg/cloudnative-pg
Red Hat Openshift Data Foundation 4/odf4/ocs-metrics-exporter-rhel9
Go
Red Hat
Critical
Fix reported
2026-09-10
golang.org/x/net vulnerable to Cross-site Scripting
CVE-2025-22872 · GHSA-VVGC-356P-C3XW
Version ranges need review.
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8
Go
Red Hat
Medium
Fix reported
2026-09-10
Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2024-28180 · GHSA-C5Q2-7R4C-MV6G
Version ranges need review.
github.com/go-jose/go-jose/v3
github.com/go-jose/go-jose/v4
Go
Red Hat
Medium
Fix reported
2026-09-10
Supplementary groups are not set up properly in github.com/containerd/containerd
CVE-2023-25173 · GHSA-HMFX-3PCX-653P
Version ranges need review.
github.com/containerd/containerd
Cryostat 2/cryostat-tech-preview/cryostat-rhel8-operator
Go
Red Hat
Medium
Fix reported
2026-09-10
golang.org/x/text/language Out-of-bounds Read vulnerability
CVE-2021-38561 · GHSA-PPP9-7JFF-5VJ2
Version ranges need review.
golang.org/x/text
OpenShift Developer Tools and Services/odo
Go
Red Hat
High
Fix reported
2026-09-10
Infinite parsing loop in golang.org/x/net
CVE-2025-58190 · GO-2026-4441
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
Go
Red Hat
Medium
Fix reported
2026-05-15
Sensitive headers incorrectly sent after cross-domain redirect in net/http
CVE-2024-45336 · GO-2025-3420
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8
Go
Red Hat
Medium
Fix reported
2026-02-17
HashiCorp Vault's revocation list not respected
CVE-2022-41316 · GHSA-9MH8-9J64-443F
Version ranges need review.
github.com/hashicorp/vault
Red Hat OpenShift Container Platform 4/openshift4/topology-aware-lifecycle-manager-rhel8-operator
Go
Red Hat
Medium
Fix reported
2026-02-04
HashiCorp Consul Template could reveal Vault secret contents in error messages
CVE-2022-38149 · GHSA-8449-7GC2-PWRP
Version ranges need review.
github.com/hashicorp/consul-template
Red Hat OpenShift Container Platform 4/openshift4/topology-aware-lifecycle-manager-rhel8-operator
Go
Red Hat
High
Fix reported
2024-05-21
Incorrect computation for some invalid field elements in crypto/elliptic
CVE-2022-23806 · GO-2021-0319
stdlib
Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator
Go
Red Hat
Medium
Fix reported
2024-05-20
Apache Cassandra vulnerable to Code Injection due to unsafe configuration
CVE-2021-44521 · GHSA-8FFC-79XG-29W8
org.apache.cassandra:cassandra-all
Red Hat Fuse 7/cassandra
Maven
Red Hat
Critical
Fix reported
2023-01-30
