All products

Red Hat OpenShift Update Service/openshift-update-service/openshift-update-service-rhel8-operator

Red Hat · Package
4 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Sensitive headers not cleared on cross-origin redirect in net/httpCVE-2025-4673 · GO-2025-3751 stdlibCryostat 4/cryostat/cryostat-storage-rhel9 GoRed Hat Medium Fix reported
Infinite loop on invalid input in golang.org/x/textCVE-2026-56852 · GO-2026-5970 golang.org/x/textAWS Load Balancer Operator/albo/aws-load-balancer-rhel9-operator GoRed Hat High Fix reported
jwt-go allows excessive memory allocation during header parsingCVE-2025-30204 · GHSA-MH63-6H87-95CPVersion ranges need review. github.com/golang-jwt/jwt/v4github.com/golang-jwt/jwt/v5 GoRed Hat High Fix reported
osus-operator: privilege escalation via excessive /etc/passwd permissionsCVE-2025-57854 Red Hat OpenShift Update Service/openshift-update-service/openshift-update-service-rhel8-operator Red Hat Medium No fix reported