Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat OpenShift Container Platform 4/openshift4/ose-image-customization-controller-rhel8
Red Hat
· Package
7 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives
CVE-2025-58058 · GHSA-JC7W-C686-C4V9
Version ranges need review.
github.com/ulikunitz/xz
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
Uncontrolled Resource Consumption in promhttp
CVE-2022-21698 · GHSA-CG3Q-J54F-5P7P
Version ranges need review.
github.com/prometheus/client_golang
Cost Management Metrics Operator/costmanagement-metrics-operator-container
Go
Red Hat
High
Fix reported
2026-09-10
goproxy Denial of Service vulnerability
CVE-2023-37788 · GHSA-4R8X-2P26-976P
Version ranges need review.
github.com/elazarl/goproxy
Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator
Go
Red Hat
High
Fix reported
2026-08-07
Improper input validation in github.com/gin-gonic/gin
CVE-2023-26125 · GHSA-3VP4-M3RF-835H
github.com/gin-gonic/gin
Migration Toolkit for Applications 6/mta/mta-admin-addon-rhel8
Go
Red Hat
Medium
Fix reported
2025-01-29
Gin's default logger allows unsanitized input that can allow remote attackers to inject arbitrary log lines
CVE-2020-36567 · GHSA-6VM3-JJ99-7229
Version ranges need review.
github.com/gin-gonic/gin
Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9
Go
Red Hat
High
Fix reported
2024-05-20
image-customization-controller: Unauthenticated plaintext image server with directory listing exposes Ignition images containing cluster pull secret
CVE-2026-82976
Red Hat OpenShift Container Platform 4/openshift4/ose-image-customization-controller-rhel8
Red Hat OpenShift Container Platform 4/openshift4/ose-image-customization-controller-rhel9
Red Hat
High
No fix reported
Not recorded
github.com/diskfs/go-diskfs: rclone: Denial of Service via malicious SquashFS image parsing
CVE-2026-79775
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Cryostat 4/cryostat/cryostat-storage-rhel9
Red Hat
Medium
No fix reported
Not recorded