Security
فارسی
All products

Red Hat OpenShift Container Platform 4/openshift4/o-cloud-manager-operator-bundle

Red Hat · Package
15 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
go-git missing validation decoding Index v4 files leads to panicCVE-2026-33762 · GHSA-GM2X-2G9H-CCM8Version ranges need review. github.com/go-git/go-git/v4github.com/go-git/go-git/v5 GoRed Hat Low Fix reported
kin-openapi has uncontrolled resource consumption in openapi3filter deepObject query parameter decodingCVE-2026-77354 · GHSA-XHJ3-7XW9-VR34Version ranges need review. github.com/getkin/kin-openapiOpenShift Serverless/openshift-serverless-1/kn-backstage-plugins-eventmesh-rhel9 GoRed Hat High Fix reported
kin-openapi openai3filter: nil-pointer panic in ConvertErrors on malformed multipart/form-data body enables unauthenticated DoSCVE-2026-76905 · GHSA-MMFR-PMJX-HW9WVersion ranges need review. github.com/getkin/kin-openapiOpenShift Serverless/openshift-serverless-1/kn-backstage-plugins-eventmesh-rhel9 GoRed Hat High Fix reported
go-git: Worktree operations may follow symlinksCVE-2026-71556 · GHSA-HC8V-WWC9-VGXMVersion ranges need review. github.com/go-git/go-git/v5github.com/go-git/go-git/v6 GoRed Hat High Fix reported
pgx: SQL Injection via placeholder confusion with dollar quoted string literalsCVE-2026-41889 · GHSA-J88V-2CHJ-QFWXVersion ranges need review. github.com/jackc/pgx/v4github.com/jackc/pgx/v5 GoRed Hat Low Fix reported
go-git improperly verifies data integrity values for .idx and .pack filesCVE-2026-25934 · GHSA-37CX-329C-33X3Version ranges need review. github.com/go-git/go-git/v4github.com/go-git/go-git/v5 GoRed Hat Medium Fix reported
go-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustionCVE-2026-44740 · GHSA-M3XC-H892-GGX6Version ranges need review. github.com/go-git/go-billy/v5github.com/go-git/go-billy/v6 GoRed Hat Medium Fix reported
go-git: Malicious reference names may modify files outside the reference storageCVE-2026-71557 · GHSA-QGQ7-7HM3-Q39JVersion ranges need review. github.com/go-git/go-git/v5github.com/go-git/go-git/v6 GoRed Hat Medium Fix reported
kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc DefaultCVE-2026-73501 · GHSA-R277-6W6Q-XMQWVersion ranges need review. github.com/getkin/kin-openapiOpenShift Serverless/kn-workflow-plugin GoRed Hat Critical Fix reported
go-git: Credential leak via cross-host redirect in smart HTTP transportCVE-2026-41506 · GHSA-3XC5-WRHM-F963Version ranges need review. github.com/go-git/go-git/v5github.com/go-git/go-git/v6 GoRed Hat Medium Fix reported
gRPC-Go has an authorization bypass via missing leading slash in :pathCVE-2026-33186 · GHSA-P77J-4MVH-X3M3Version ranges need review. google.golang.org/grpcAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Critical Fix reported
go-git: Maliciously crafted idx file can cause asymmetric memory consumptionCVE-2026-34165 · GHSA-JHF3-XXHW-2WPPVersion ranges need review. github.com/go-git/go-git/v4github.com/go-git/go-git/v5 GoRed Hat Medium Fix reported
CIRCL-Fourq: Missing and wrong validation can lead to incorrect resultsCVE-2025-8556 · GHSA-2X5J-VHC8-9CWMVersion ranges need review. github.com/cloudflare/circlBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9 GoRed Hat Low Fix reported
kin-openapi openapi3filter: unauthenticated nil-pointer panic when validating a request against a `content` parameter whose media type has no schemaCVE-2026-73502 · GHSA-JPCW-4WR7-C3VQVersion ranges need review. github.com/getkin/kin-openapiMigration Toolkit for Applications 8/mta/mta-hub-rhel9 GoRed Hat Medium Fix reported
go.mongodb.org/mongo-driver: go.mongodb.org/mongo-driver/v2: MongoDB Go Driver: Data deletion via query-operator injection in GridFS file IDsCVE-2026-88031 Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 Red Hat High No fix reported