All products

Red Hat OpenShift Container Platform 4/openshift4/ose-image-customization-controller-rhel8

Red Hat · Package
7 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archivesCVE-2025-58058 · GHSA-JC7W-C686-C4V9Version ranges need review. github.com/ulikunitz/xzAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9 GoRed Hat Medium Fix reported
Uncontrolled Resource Consumption in promhttpCVE-2022-21698 · GHSA-CG3Q-J54F-5P7PVersion ranges need review. github.com/prometheus/client_golangCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat High Fix reported
goproxy Denial of Service vulnerabilityCVE-2023-37788 · GHSA-4R8X-2P26-976PVersion ranges need review. github.com/elazarl/goproxyLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator GoRed Hat High Fix reported
Improper input validation in github.com/gin-gonic/ginCVE-2023-26125 · GHSA-3VP4-M3RF-835H github.com/gin-gonic/ginMigration Toolkit for Applications 6/mta/mta-admin-addon-rhel8 GoRed Hat Medium Fix reported
Gin's default logger allows unsanitized input that can allow remote attackers to inject arbitrary log linesCVE-2020-36567 · GHSA-6VM3-JJ99-7229Version ranges need review. github.com/gin-gonic/ginMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat High Fix reported
image-customization-controller: Unauthenticated plaintext image server with directory listing exposes Ignition images containing cluster pull secretCVE-2026-82976 Red Hat OpenShift Container Platform 4/openshift4/ose-image-customization-controller-rhel8Red Hat OpenShift Container Platform 4/openshift4/ose-image-customization-controller-rhel9 Red Hat High No fix reported
github.com/diskfs/go-diskfs: rclone: Denial of Service via malicious SquashFS image parsingCVE-2026-79775 Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9Cryostat 4/cryostat/cryostat-storage-rhel9 Red Hat Medium No fix reported