Red Hat OpenShift Container Platform 4/openshift4/ose-ibm-cloud-controller-manager-rhel8

Red Hat · Package

6 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/netCVE-2026-33814 · GO-2026-4918	golang.org/x/net stdlib	GoRed Hat	High	Fix reported	2026-10-16
Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSONCVE-2024-24786 · GHSA-8R3F-844C-MC37Version ranges need review.	google.golang.org/protobuf/encoding/protojson google.golang.org/protobuf/internal/encoding/json	GoRed Hat	Medium	Fix reported	2026-10-14
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistecCVE-2025-22866 · GO-2025-3447	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8	GoRed Hat	Medium	Fix reported	2026-09-29
go-retryablehttp can leak basic auth credentials to log filesCVE-2024-6104 · GHSA-V6V8-XJ6M-XWQHVersion ranges need review.	github.com/hashicorp/go-retryablehttp OpenShift API for Data Protection/oadp/oadp-kubevirt-velero-plugin-rhel8	GoRed Hat	Medium	Fix reported	2026-09-10
Uncontrolled Resource Consumption in promhttpCVE-2022-21698 · GHSA-CG3Q-J54F-5P7PVersion ranges need review.	github.com/prometheus/client_golang Cost Management Metrics Operator/costmanagement-metrics-operator-container	GoRed Hat	High	Fix reported	2026-09-10
github.com/grpc-ecosystem/grpc-gateway: github.com/grpc-ecosystem/grpc-gateway/v2: grpc-gateway: Access control bypass via X-HTTP-Method-Override headerCVE-2026-37236	Multicluster Global Hub/multicluster-globalhub/multicluster-globalhub-grafana-rhel9 OpenShift Serverless/openshift-serverless-1/kn-plugin-event-sender-rhel9	Red Hat	Medium	No fix reported	Not recorded