Security
فارسی
All products

Red Hat OpenShift Container Platform 4/openshift4/ose-baremetal-installer-rhel8

Red Hat · Package
16 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Prevent DoS on deadlocked established channel in golang.org/x/crypto/sshCVE-2026-56855 · GO-2026-6355 golang.org/x/cryptoAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/htmlCVE-2026-42502 · GO-2026-5027 golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
golang.org/x/crypto: Invoking pathological inputs can lead to client panicCVE-2026-46598 · GHSA-9M57-25V3-79X9Version ranges need review. golang.org/x/cryptoAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
golang.org/x/crypto vulnerable to infinite loop on large channel writesCVE-2026-39834 · GHSA-RM3J-F69W-WQMQVersion ranges need review. golang.org/x/cryptoAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Critical Fix reported
golang.org/x/crypto: Invoking memory leak when rejecting channels can lead to DoSCVE-2026-39827 · GHSA-QPW4-5X99-6VJPVersion ranges need review. golang.org/x/cryptoAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
Go Net HTML parser is vulnerable to denial of serviceCVE-2026-25680 · GHSA-5CV4-JP36-H3MWVersion ranges need review. golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
golang.org/x/net/html has a Quadratic Parsing Complexity issueCVE-2025-47911 · GHSA-W4GW-W5JQ-G9JH golang.org/x/net/htmlgolang.org/x/net GoRed Hat Medium Fix reported
golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds readCVE-2025-47914 · GHSA-F6X5-JH6R-WRFVVersion ranges need review. golang.org/x/cryptoAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9 GoRed Hat Medium Fix reported
golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumptionCVE-2025-58181 · GHSA-J5W8-Q4QC-RX2XVersion ranges need review. golang.org/x/cryptoBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9 GoRed Hat Medium Fix reported
golang.org/x/crypto/ssh NULL Pointer Dereference vulnerabilityCVE-2020-29652 · GHSA-3VM4-22FP-5RFMVersion ranges need review. golang.org/x/cryptoOpenShift Service Mesh 2.0/3scale-istio-adapter-rhel8-container GoRed Hat High Fix reported
Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/sshCVE-2026-78662 · GO-2026-6354 golang.org/x/cryptoAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
golang.org/x/net/html Infinite Loop vulnerabilityCVE-2021-33194 · GHSA-83G2-8M93-V3W7Version ranges need review. golang.org/x/netLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator GoRed Hat High Fix reported
HashiCorp go-getter unsafe downloads could lead to asymmetric resource exhaustionCVE-2022-30323 · GHSA-28R2-Q6M8-9HPX github.com/hashicorp/go-getter/gcs/v2github.com/hashicorp/go-getter/s3/v2 GoRed Hat High Fix reported
HashiCorp go-getter unsafe downloads could lead to arbitrary host accessCVE-2022-30322 · GHSA-CJR4-FV6C-F3MV github.com/hashicorp/go-getter/gcs/v2github.com/hashicorp/go-getter/s3/v2 GoRed Hat High Fix reported
HashiCorp go-getter command injectionCVE-2022-26945 · GHSA-X24G-9W7V-VPRH github.com/hashicorp/go-getter/gcs/v2github.com/hashicorp/go-getter/s3/v2 GoRed Hat Critical Fix reported
github.com/diskfs/go-diskfs: rclone: Denial of Service via malicious SquashFS image parsingCVE-2026-79775 Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9Cryostat 4/cryostat/cryostat-storage-rhel9 Red Hat Medium No fix reported