Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-rhel9-operator
Red Hat
· Package
13 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion
CVE-2026-54462 · GHSA-2HW4-C9M4-F2FJ
Version ranges need review.
knative.dev/pkg
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel10
Go
Red Hat
Medium
Fix reported
2026-11-06
Enforce maximum recursion depth in encoding/asn1
CVE-2026-33818 · GO-2026-5972
stdlib
AWS Load Balancer Operator/albo/aws-load-balancer-operator
Go
Red Hat
High
Fix reported
2026-10-20
Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html
CVE-2026-42502 · GO-2026-5027
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-22
Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching
CVE-2026-25542 · GHSA-RMX9-2PP3-XHCR
Version ranges need review.
github.com/tektoncd/pipeline
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
Tekton Pipelines: VolumeMount path restriction bypass via missing filepath.Clean in /tekton/ check
CVE-2026-40923 · GHSA-RX35-6RHX-7858
Version ranges need review.
github.com/tektoncd/pipeline
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
Go Net HTML parser is vulnerable to denial of service
CVE-2026-25680 · GHSA-5CV4-JP36-H3MW
Version ranges need review.
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
Tekton Pipelines: HTTP Resolver Unbounded Response Body Read Enables Denial of Service via Memory Exhaustion
CVE-2026-40924 · GHSA-M2CX-GPQF-QF74
Version ranges need review.
github.com/tektoncd/pipeline
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun
CVE-2026-33022 · GHSA-CV4X-93XX-WGFJ
Version ranges need review.
github.com/tektoncd/pipeline
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
golang.org/x/net/html has a Quadratic Parsing Complexity issue
CVE-2025-47911 · GHSA-W4GW-W5JQ-G9JH
golang.org/x/net/html
golang.org/x/net
Go
Red Hat
Medium
Fix reported
2026-09-10
golang.org/x/net vulnerable to Cross-site Scripting
CVE-2025-22872 · GHSA-VVGC-356P-C3XW
Version ranges need review.
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8
Go
Red Hat
Medium
Fix reported
2026-09-10
Infinite parsing loop in golang.org/x/net
CVE-2025-58190 · GO-2026-4441
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
Go
Red Hat
Medium
Fix reported
2026-05-15
Sensitive headers incorrectly sent after cross-domain redirect in net/http
CVE-2024-45336 · GO-2025-3420
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8
Go
Red Hat
Medium
Fix reported
2026-02-17
pipelines-as-code: openshift-pipelines-operator-rh: pipelines-as-code: Repository users can trigger namespace edit-equivalent execution via auto-provisioned pipeline ServiceAccount
CVE-2026-50240
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-rhel9-operator
OpenShift Pipelines/openshift-pipelines-client
Red Hat
High
No fix reported
Not recorded
