Red Hat OpenShift Container Platform 4/openshift4/ose-vsphere-cloud-controller-manager-rhel8

Red Hat · Package

6 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/netCVE-2026-33814 · GO-2026-4918	golang.org/x/net stdlib	GoRed Hat	High	Fix reported	2026-10-16
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistecCVE-2025-22866 · GO-2025-3447	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8	GoRed Hat	Medium	Fix reported	2026-09-29
Supplementary groups are not set up properly in github.com/containerd/containerdCVE-2023-25173 · GHSA-HMFX-3PCX-653PVersion ranges need review.	github.com/containerd/containerd Cryostat 2/cryostat-tech-preview/cryostat-rhel8-operator	GoRed Hat	Medium	Fix reported	2026-09-10
go.mongodb.org/mongo-driver improperly validates cstrings when marshalling Go objects into BSONCVE-2021-20329 · GHSA-F6MQ-5M25-4R72Version ranges need review.	go.mongodb.org/mongo-driver Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9	GoRed Hat	Medium	Fix reported	2024-09-17
Incorrect Authorization in imgcryptCVE-2022-24778 · GHSA-8V99-48M9-C8PMVersion ranges need review.	github.com/containerd/imgcrypt Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/endpoint-monitoring-rhel8-operator	GoRed Hat	High	Fix reported	2024-05-21
github.com/grpc-ecosystem/grpc-gateway: github.com/grpc-ecosystem/grpc-gateway/v2: grpc-gateway: Access control bypass via X-HTTP-Method-Override headerCVE-2026-37236	Multicluster Global Hub/multicluster-globalhub/multicluster-globalhub-grafana-rhel9 OpenShift Serverless/openshift-serverless-1/kn-plugin-event-sender-rhel9	Red Hat	Medium	No fix reported	Not recorded