Red Hat OpenShift Container Platform 4/openshift4/ose-oauth-proxy

Red Hat · Package

9 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/htmlCVE-2026-42502 · GO-2026-5027	golang.org/x/net Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9	GoRed Hat	Medium	Fix reported	2026-09-22
golang.org/x/crypto: Invoking memory leak when rejecting channels can lead to DoSCVE-2026-39827 · GHSA-QPW4-5X99-6VJPVersion ranges need review.	golang.org/x/crypto Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9	GoRed Hat	Medium	Fix reported	2026-09-22
Go Net HTML parser is vulnerable to denial of serviceCVE-2026-25680 · GHSA-5CV4-JP36-H3MWVersion ranges need review.	golang.org/x/net Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9	GoRed Hat	Medium	Fix reported	2026-09-10
golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds readCVE-2025-47914 · GHSA-F6X5-JH6R-WRFVVersion ranges need review.	golang.org/x/crypto Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9	GoRed Hat	Medium	Fix reported	2026-09-10
golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumptionCVE-2025-58181 · GHSA-J5W8-Q4QC-RX2XVersion ranges need review.	golang.org/x/crypto Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9	GoRed Hat	Medium	Fix reported	2026-09-10
Improper rendering of text nodes in golang.org/x/net/htmlCVE-2023-3978 · GHSA-2WRH-6PVC-2JM9Version ranges need review.	golang.org/x/net OpenShift API for Data Protection/oadp/oadp-rhel8-operator	GoRed Hat	Medium	Fix reported	2026-09-10
Uncontrolled Resource Consumption in promhttpCVE-2022-21698 · GHSA-CG3Q-J54F-5P7PVersion ranges need review.	github.com/prometheus/client_golang Cost Management Metrics Operator/costmanagement-metrics-operator-container	GoRed Hat	High	Fix reported	2026-09-10
OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metricsCVE-2023-45142 · GHSA-RCJV-MGP8-QVMRVersion ranges need review.	go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin	GoRed Hat	High	Fix reported	2026-09-10
openshift/oauth-proxy: openshift/oauth-proxy: unauthenticated identity header injection on whitelisted pathsCVE-2026-49331	Red Hat OpenShift Container Platform 4/openshift4/ose-oauth-proxy-rhel9 Red Hat OpenShift Container Platform 4/openshift4/ose-oauth-proxy	Red Hat	Medium	No fix reported	Not recorded