OpenShift Run Once Duration Override Operator/run-once-duration-override-operator/run-once-duration-override-rhel9

Red Hat · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Sensitive headers not cleared on cross-origin redirect in net/httpCVE-2025-4673 · GO-2025-3751	stdlib Cryostat 4/cryostat/cryostat-storage-rhel9	GoRed Hat	Medium	Fix reported	2026-10-14
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistecCVE-2025-22866 · GO-2025-3447	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8	GoRed Hat	Medium	Fix reported	2026-09-29
Infinite loop on invalid input in golang.org/x/textCVE-2026-56852 · GO-2026-5970	golang.org/x/text AWS Load Balancer Operator/albo/aws-load-balancer-rhel9-operator	GoRed Hat	High	Fix reported	2026-09-23
gRPC-Go has an authorization bypass via missing leading slash in :pathCVE-2026-33186 · GHSA-P77J-4MVH-X3M3Version ranges need review.	google.golang.org/grpc Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9	GoRed Hat	Critical	Fix reported	2026-09-10
OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metricsCVE-2023-45142 · GHSA-RCJV-MGP8-QVMRVersion ranges need review.	go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin	GoRed Hat	High	Fix reported	2026-09-10
Incorrect results returned from Rows.Scan in database/sqlCVE-2025-47907 · GO-2025-3849	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	GoRed Hat	Medium	Fix reported	2026-05-30
Sensitive headers incorrectly sent after cross-domain redirect in net/httpCVE-2024-45336 · GO-2025-3420	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8	GoRed Hat	Medium	Fix reported	2026-02-17