Security
فارسی
All products

Red Hat OpenShift Container Platform 4/openshift4/ose-vsphere-csi-driver-syncer-rhel8

Red Hat · Package
18 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/netCVE-2026-33814 · GO-2026-4918 golang.org/x/netstdlib GoRed Hat High Fix reported
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistecCVE-2025-22866 · GO-2025-3447 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 GoRed Hat Medium Fix reported
Prevent DoS on deadlocked established channel in golang.org/x/crypto/sshCVE-2026-56855 · GO-2026-6355 golang.org/x/cryptoAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/htmlCVE-2026-42502 · GO-2026-5027 golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/htmlCVE-2026-25681 · GO-2026-5029 golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat High Fix reported
golang.org/x/crypto: Invoking memory leak when rejecting channels can lead to DoSCVE-2026-39827 · GHSA-QPW4-5X99-6VJPVersion ranges need review. golang.org/x/cryptoAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
ebpf-go is vulnerable to integer overflow via LoadCollectionSpecFromReaderCVE-2026-10722 · GHSA-XHGW-QWWF-PG32Version ranges need review. github.com/cilium/ebpfConfidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9 GoRed Hat Low Fix reported
Go Net HTML parser is vulnerable to denial of serviceCVE-2026-25680 · GHSA-5CV4-JP36-H3MWVersion ranges need review. golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
golang.org/x/net/html has a Quadratic Parsing Complexity issueCVE-2025-47911 · GHSA-W4GW-W5JQ-G9JH golang.org/x/net/htmlgolang.org/x/net GoRed Hat Medium Fix reported
Logrus is vulnerable to DoS when using Entry.Writer()CVE-2025-65637 · GHSA-4F99-4Q7P-P3GHVersion ranges need review. github.com/sirupsen/logrusConfidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9 GoRed Hat High Fix reported
golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds readCVE-2025-47914 · GHSA-F6X5-JH6R-WRFVVersion ranges need review. golang.org/x/cryptoAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9 GoRed Hat Medium Fix reported
golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumptionCVE-2025-58181 · GHSA-J5W8-Q4QC-RX2XVersion ranges need review. golang.org/x/cryptoBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9 GoRed Hat Medium Fix reported
Node Denial of Service via kubelet Checkpoint APICVE-2025-0426 · GHSA-JGFP-53C3-624WVersion ranges need review. k8s.io/kubernetesBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-shared-resource-rhel9 GoRed Hat Medium Fix reported
YAML Go package vulnerable to denial of serviceCVE-2021-4235 · GHSA-R88R-GMRH-7J83Version ranges need review. github.com/go-yaml/yamlgopkg.in/yaml.v2 GoRed Hat Medium Fix reported
golang.org/x/crypto/ssh Denial of service via crafted SignerCVE-2022-27191 · GHSA-8C26-WMH5-6G9VVersion ranges need review. golang.org/x/cryptoMigration Toolkit for Containers/cpma GoRed Hat High Fix reported
Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/sshCVE-2026-78662 · GO-2026-6354 golang.org/x/cryptoAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
Cilium node based network policies may incorrectly allow workload trafficCVE-2025-30163 · GHSA-C6PF-2V8J-96MCVersion ranges need review. github.com/cilium/ciliumNetwork Observability Operator/network-observability/network-observability-ebpf-agent-rhel9 GoRed Hat Low Fix reported
Cilium East-west traffic not subject to egress policy enforcement for requests via Gateway API load balancersCVE-2025-30162 · GHSA-24QP-4XX8-3JVJVersion ranges need review. github.com/cilium/ciliumNetwork Observability Operator/network-observability/network-observability-ebpf-agent-rhel9 GoRed Hat Low Fix reported