Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Openshift Data Foundation 4/odf4/odf-cloudnative-pg-rhel9-operator
Red Hat
· Package
10 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
go-git missing validation decoding Index v4 files leads to panic
CVE-2026-33762 · GHSA-GM2X-2G9H-CCM8
Version ranges need review.
github.com/go-git/go-git/v4
github.com/go-git/go-git/v5
Go
Red Hat
Low
Fix reported
2026-11-03
pgx: SQL Injection via placeholder confusion with dollar quoted string literals
CVE-2026-41889 · GHSA-J88V-2CHJ-QFWX
Version ranges need review.
github.com/jackc/pgx/v4
github.com/jackc/pgx/v5
Go
Red Hat
Low
Fix reported
2026-09-10
Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage
CVE-2026-49478 · GHSA-F5MR-Q85P-6HH6
Version ranges need review.
github.com/sigstore/fulcio
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
High
Fix reported
2026-09-10
Docker: Race condition in docker cp allows bind mount redirection to host path
CVE-2026-42306 · GHSA-RG2X-37C3-W2RH
Version ranges need review.
github.com/docker/docker
github.com/moby/moby/v2
Go
Red Hat
High
Fix reported
2026-09-10
CloudNativePG's metrics exporter allows privilege escalation to PostgreSQL superuser and OS RCE
CVE-2026-44477 · GHSA-423P-G724-FR39
Version ranges need review.
github.com/cloudnative-pg/cloudnative-pg
Red Hat Openshift Data Foundation 4/odf4/ocs-metrics-exporter-rhel9
Go
Red Hat
Critical
Fix reported
2026-09-10
go-git: Maliciously crafted idx file can cause asymmetric memory consumption
CVE-2026-34165 · GHSA-JHF3-XXHW-2WPP
Version ranges need review.
github.com/go-git/go-git/v4
github.com/go-git/go-git/v5
Go
Red Hat
Medium
Fix reported
2026-09-10
sigstore legacy TUF client allows for arbitrary file writes with target cache path traversal
CVE-2026-24137 · GHSA-FCV2-XGW5-PQXF
Version ranges need review.
github.com/sigstore/sigstore
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
Infinite parsing loop in golang.org/x/net
CVE-2025-58190 · GO-2026-4441
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
Go
Red Hat
Medium
Fix reported
2026-05-15
istio: Istio: Firewall rule injection via annotation allows limited integrity impact
CVE-2026-23766
ExternalDNS Operator/edo/external-dns-rhel8
ExternalDNS Operator/edo/external-dns-rhel9
Red Hat
Unknown
No fix reported
Not recorded
tabby: Tabby: Arbitrary file write via SFTP path traversal
CVE-2026-72903
Red Hat Openshift Data Foundation 4/odf4/odf-cloudnative-pg-rhel9-operator
Red Hat
High
No fix reported
Not recorded
