Red Hat OpenShift Virtualization 4/container-native-virtualization/virt-cdi-operator

Red Hat · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Logrus is vulnerable to DoS when using Entry.Writer()CVE-2025-65637 · GHSA-4F99-4Q7P-P3GHVersion ranges need review.	github.com/sirupsen/logrus Confidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9	GoRed Hat	High	Fix reported	2026-09-10
github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archivesCVE-2025-58058 · GHSA-JC7W-C686-C4V9Version ranges need review.	github.com/ulikunitz/xz Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9	GoRed Hat	Medium	Fix reported	2026-09-10
github.com/containers/image allows unexpected authenticated registry accessesCVE-2024-3727 · GHSA-6WVF-F2VW-3425Version ranges need review.	github.com/containers/image/v5 github.com/containers/image	GoRed Hat	High	Fix reported	2026-09-10
Incorrect access control in the go command in cmd/go/internal/modfetchCVE-2022-23773 · GO-2022-0318	toolchain Migration Toolkit for Containers/cpma	GoRed Hat	Medium	Fix reported	2024-05-20
Stack exhaustion when compiling deeply nested expressions in regexpCVE-2022-24921 · GO-2021-0347	stdlib Migration Toolkit for Containers/cpma	GoRed Hat	Medium	Fix reported	2024-05-20
golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octetCVE-2021-29923	Migration Toolkit for Containers/rhmtc/openshift-migration-must-gather-rhel8 Migration Toolkit for Containers/rhmtc/openshift-migration-registry-rhel8	Red Hat	Medium	No fix reported	Not recorded
virt-cdi-operator: containerized-data-importer: cdi.kubevirt.io:view aggregated ClusterRole grants create on datavolumes/source, allowing unauthorized PVC cloneCVE-2026-17527	Red Hat OpenShift Virtualization 4/container-native-virtualization/virt-cdi-operator	Red Hat	High	No fix reported	Not recorded