Red Hat OpenShift Container Platform 4/openshift4/ose-etcd-rhel9

Red Hat · Package

5 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
compress zstd: Panic on two-block framesCVE-2026-116591 · GHSA-FPMH-FRQ8-7RJ8	github.com/klauspost/compress/zstd github.com/klauspost/compress	GoRed Hat	High	Fix reported	2026-11-06
opentelemetry-go's baggage parsing no longer caps raw header lengthCVE-2026-41178 · GHSA-5WRP-CWCJ-Q835	go.opentelemetry.io/otel/baggage go.opentelemetry.io/otel/propagation	GoRed Hat	Medium	Fix reported	2026-09-10
etcd: Watch API authorization bypass via open-ended range requestsCVE-2026-73499 · GHSA-XG4H-6GFC-H4M8	go.etcd.io/etcd/server/v3 go.etcd.io/etcd/v3	GoRed Hat	High	Fix reported	2026-08-20
etcd RBAC bypass allows unauthorized data access via PrevKv/lease attachment in nested transaction Put requestsCVE-2026-44283 · GHSA-X35M-3GP4-4FH5	go.etcd.io/etcd/server/v3 go.etcd.io/etcd/v3	GoRed Hat	Low	Fix reported	2026-07-25
go.mongodb.org/mongo-driver: go.mongodb.org/mongo-driver/v2: MongoDB Go Driver: Data deletion via query-operator injection in GridFS file IDsCVE-2026-88031	Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	Red Hat	High	No fix reported	Not recorded