Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat OpenShift Virtualization 4/container-native-virtualization/kubemacpool-rhel9
Red Hat
· Package
14 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
HTTP/2 transport accepts malformed framing-related headers in net/http
CVE-2026-78660 · GO-2026-6610
golang.org/x/net
stdlib
Go
Red Hat
Medium
Fix reported
2026-10-16
Lack of limit on size of parsed Range headers in net/http
CVE-2026-78667 · GO-2026-6609
stdlib
AWS Load Balancer Operator/albo/aws-load-balancer-rhel8-operator
Go
Red Hat
High
Fix reported
2026-10-16
Memory exhaustion in query parameter parsing in net/url
CVE-2025-61726 · GO-2026-4341
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
Go
Red Hat
High
Fix reported
2026-10-03
KubeVirt Arbitrary Container File Read
CVE-2025-64433 · GHSA-QW6Q-3PGR-5CWQ
Version ranges need review.
kubevirt.io/kubevirt
Red Hat OpenShift Virtualization 4/container-native-virtualization/kubemacpool-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
go-git: Credential leak via cross-host redirect in smart HTTP transport
CVE-2026-41506 · GHSA-3XC5-WRHM-F963
Version ranges need review.
github.com/go-git/go-git/v5
github.com/go-git/go-git/v6
Go
Red Hat
Medium
Fix reported
2026-09-10
golang.org/x/net/html has a Quadratic Parsing Complexity issue
CVE-2025-47911 · GHSA-W4GW-W5JQ-G9JH
golang.org/x/net/html
golang.org/x/net
Go
Red Hat
Medium
Fix reported
2026-09-10
KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes
CVE-2025-64436 · GHSA-7XGM-5PRM-V5GC
github.com/kubevirt/kubevirt
kubevirt.io/kubevirt
Go
Red Hat
Medium
Fix reported
2026-09-10
KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer
CVE-2025-64432 · GHSA-38JW-G2QX-4286
Version ranges need review.
kubevirt.io/kubevirt
Red Hat OpenShift Virtualization 4/container-native-virtualization/kubemacpool-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
KubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation
CVE-2025-64435 · GHSA-9M94-W2VQ-HCF9
Version ranges need review.
kubevirt.io/kubevirt
Red Hat OpenShift Virtualization 4/container-native-virtualization/kubemacpool-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
KubeVirt Isolation Detection Flaw Allows Arbitrary File Permission Changes
CVE-2025-64437 · GHSA-2R4R-5X78-MVQF
Version ranges need review.
kubevirt.io/kubevirt
Red Hat OpenShift Virtualization 4/container-native-virtualization/kubemacpool-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
golang.org/x/net vulnerable to Cross-site Scripting
CVE-2025-22872 · GHSA-VVGC-356P-C3XW
Version ranges need review.
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8
Go
Red Hat
Medium
Fix reported
2026-09-10
Sensitive headers incorrectly sent after cross-domain redirect in net/http
CVE-2024-45336 · GO-2025-3420
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8
Go
Red Hat
Medium
Fix reported
2026-02-17
golang.org/x/net vulnerable to Uncontrolled Resource Consumption
CVE-2022-41723 · GHSA-VVPX-J8F3-3W6H
Version ranges need review.
golang.org/x/net
stdlib
Go
Red Hat
High
Fix reported
2026-02-04
squirrel: Squirrel: Heap-based buffer overflow allows local denial of service
CVE-2026-8261
Deployment Validation Operator/dvo/deployment-validation-rhel8-operator
MCP Server for Red Hat OpenShift/openshift-mcp-beta/openshift-mcp-server-rhel9
Red Hat
Medium
No fix reported
Not recorded
