OpenShift API for Data Protection/oadp/oadp-velero-plugin-for-csi-rhel9

Red Hat · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Enforce maximum recursion depth in encoding/asn1CVE-2026-33818 · GO-2026-5972	stdlib AWS Load Balancer Operator/albo/aws-load-balancer-operator	GoRed Hat	High	Fix reported	2026-10-20
Unbounded allocation when parsing GNU sparse map in archive/tarCVE-2025-58183 · GO-2025-4014	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9	GoRed Hat	Medium	Fix reported	2026-10-02
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistecCVE-2025-22866 · GO-2025-3447	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8	GoRed Hat	Medium	Fix reported	2026-09-29
Logrus is vulnerable to DoS when using Entry.Writer()CVE-2025-65637 · GHSA-4F99-4Q7P-P3GHVersion ranges need review.	github.com/sirupsen/logrus Confidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9	GoRed Hat	High	Fix reported	2026-09-10
Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situationsCVE-2024-51744 · GHSA-29WX-VH33-7X7RVersion ranges need review.	github.com/golang-jwt/jwt/v4 Builds for Red Hat OpenShift/openshift-builds-triggers-container	GoRed Hat	Low	Fix reported	2026-09-10
Kopia: RCE via SSH ProxyCommand InjectionCVE-2026-45695 · GHSA-2Q4C-3MRW-63C3Version ranges need review.	github.com/kopia/kopia Migration Toolkit for Containers/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8	GoRed Hat	Critical	Fix reported	2026-06-02
Sensitive headers incorrectly sent after cross-domain redirect in net/httpCVE-2024-45336 · GO-2025-3420	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8	GoRed Hat	Medium	Fix reported	2026-02-17