Security
فارسی
All products

Security Profiles Operator/compliance/openshift-selinuxd-rhel8

Red Hat · Package
16 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
chi Has an IP Spoofing Vulnerability in `middleware.RealIP`CVE-2026-72815 · GHSA-3FXJ-6JH8-HVHXVersion ranges need review. github.com/go-chi/chi/v5/middlewaregithub.com/go-chi/chi/v5 GoRed Hat Medium Fix reported
HTTP/2 transport accepts malformed framing-related headers in net/httpCVE-2026-78660 · GO-2026-6610 golang.org/x/netstdlib GoRed Hat Medium Fix reported
Arbitrary inputs are included in errors without any escaping in net/textprotoCVE-2026-42507 · GO-2026-5039 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium Fix reported
Invoking Encrypted Client Hello privacy leak in crypto/tlsCVE-2026-42505 · GO-2026-5856 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium Fix reported
Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/htmlCVE-2026-42502 · GO-2026-5027 golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
chi's RealIP Middleware allows IP spoofing via unvalidated X-Forwarded-For headerCVE-2026-72816 · GHSA-RJR7-JGGH-PGCP github.com/go-chi/chi/middlewaregithub.com/go-chi/chi/v2/middleware GoRed Hat High Fix reported
chi Middleware Vulnerable to Potential IP Spoofing via `X-Forwarded-For` Header in `Request.RemoteAddr` ResolutionCVE-2026-72817 · GHSA-9G5Q-2W5X-HMXF github.com/go-chi/chi/middlewaregithub.com/go-chi/chi/v2/middleware GoRed Hat High Fix reported
Go Net HTML parser is vulnerable to denial of serviceCVE-2026-25680 · GHSA-5CV4-JP36-H3MWVersion ranges need review. golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
chi has an open redirect vulnerability in the RedirectSlashes middlewareCVE-2025-69725 · GHSA-MQQF-5WVP-8FH8Version ranges need review. github.com/go-chi/chi/v2github.com/go-chi/chi/v3 GoRed Hat Medium Fix reported
Escaper bypass leads to XSS in html/templateCVE-2026-39826 · GO-2026-4980 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium Fix reported
Bypass of meta content URL escaping causes XSS in html/templateCVE-2026-39823 · GO-2026-4982 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium Fix reported
Kratos has a Confused Deputy issueCVE-2026-6993 · GHSA-JJ45-XVQ5-RHH9Version ranges need review. github.com/go-kratos/kratos/v2Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium No fix reported
Quadratic complexity when parsing some invalid inputs in encoding/pemCVE-2025-61723 · GO-2025-4009 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium Fix reported
CrossOriginProtection insecure bypass patterns not limited to exact matches in net/httpCVE-2025-47910 · GO-2025-3955 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium Fix reported
ALPN negotiation error contains attacker controlled information in crypto/tlsCVE-2025-58189 · GO-2025-4008 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium Fix reported
Parsing DER payload can cause memory exhaustion in encoding/asn1CVE-2025-58185 · GO-2025-4011 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium Fix reported