Red Hat OpenShift Dev Workspaces Operator/devworkspace/devworkspace-operator-bundle

Red Hat · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
go-git missing validation decoding Index v4 files leads to panicCVE-2026-33762 · GHSA-GM2X-2G9H-CCM8Version ranges need review.	github.com/go-git/go-git/v4 github.com/go-git/go-git/v5	GoRed Hat	Low	Fix reported	2026-11-03
go-git improperly verifies data integrity values for .idx and .pack filesCVE-2026-25934 · GHSA-37CX-329C-33X3Version ranges need review.	github.com/go-git/go-git/v4 github.com/go-git/go-git/v5	GoRed Hat	Medium	Fix reported	2026-09-10
go-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustionCVE-2026-44740 · GHSA-M3XC-H892-GGX6Version ranges need review.	github.com/go-git/go-billy/v5 github.com/go-git/go-billy/v6	GoRed Hat	Medium	Fix reported	2026-09-10
go-git: Malicious reference names may modify files outside the reference storageCVE-2026-71557 · GHSA-QGQ7-7HM3-Q39JVersion ranges need review.	github.com/go-git/go-git/v5 github.com/go-git/go-git/v6	GoRed Hat	Medium	Fix reported	2026-09-10
go-git: Credential leak via cross-host redirect in smart HTTP transportCVE-2026-41506 · GHSA-3XC5-WRHM-F963Version ranges need review.	github.com/go-git/go-git/v5 github.com/go-git/go-git/v6	GoRed Hat	Medium	Fix reported	2026-09-10
go-git: Maliciously crafted idx file can cause asymmetric memory consumptionCVE-2026-34165 · GHSA-JHF3-XXHW-2WPPVersion ranges need review.	github.com/go-git/go-git/v4 github.com/go-git/go-git/v5	GoRed Hat	Medium	Fix reported	2026-09-10
CIRCL-Fourq: Missing and wrong validation can lead to incorrect resultsCVE-2025-8556 · GHSA-2X5J-VHC8-9CWMVersion ranges need review.	github.com/cloudflare/circl Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9	GoRed Hat	Low	Fix reported	2026-09-10