All products

Red Hat OpenShift distributed tracing 3/rhosdt/tempo-operator-bundle

Red Hat · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browserCVE-2025-30360 · GHSA-9JGG-88MC-972H webpack-dev-serverCryostat 4/io.cryostat-cryostat npmRed Hat Medium Fix reported
webpack-dev-server users' source code may be stolen when they access a malicious web siteCVE-2025-30359 · GHSA-4V9V-HFQ4-RM2V webpack-dev-serverCryostat 4/io.cryostat-cryostat npmRed Hat Medium Fix reported
Cilium node based network policies may incorrectly allow workload trafficCVE-2025-30163 · GHSA-C6PF-2V8J-96MCVersion ranges need review. github.com/cilium/ciliumNetwork Observability Operator/network-observability/network-observability-ebpf-agent-rhel9 GoRed Hat Low Fix reported
Cilium East-west traffic not subject to egress policy enforcement for requests via Gateway API load balancersCVE-2025-30162 · GHSA-24QP-4XX8-3JVJVersion ranges need review. github.com/cilium/ciliumNetwork Observability Operator/network-observability/network-observability-ebpf-agent-rhel9 GoRed Hat Low Fix reported
Harden-Runner allows evasion of 'disable-sudo' policyCVE-2025-32955 · GHSA-MXR3-8WHJ-J74R step-security/harden-runnerRed Hat Enterprise Linux AI (RHEL AI)/rhelai1/pathservice-rhel9 GitHub ActionsRed Hat Medium Fix reported
tempo-operator: Tempo Operator: Query RBAC bypassCVE-2026-62147 Red Hat OpenShift distributed tracing 3/rhosdt/tempo-operator-bundleRed Hat OpenShift distributed tracing 3/rhosdt/tempo-rhel9-operator Red Hat Medium No fix reported