Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat OpenShift Container Platform 4/openshift4/frr-rhel9
Red Hat
· Package
15 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
HTTP/2 transport accepts malformed framing-related headers in net/http
CVE-2026-78660 · GO-2026-6610
golang.org/x/net
stdlib
Go
Red Hat
Medium
Fix reported
2026-10-16
JsBraceDepth Context Tracking Bugs (XSS) in html/template
CVE-2026-32289 · GO-2026-4865
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/redhat-user-workloads/appliance
Go
Red Hat
Medium
Fix reported
2026-10-07
Arbitrary inputs are included in errors without any escaping in net/textproto
CVE-2026-42507 · GO-2026-5039
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-10-03
Invoking Encrypted Client Hello privacy leak in crypto/tls
CVE-2026-42505 · GO-2026-5856
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-10-03
TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix
CVE-2026-32282 · GO-2026-4864
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/redhat-user-workloads/appliance
Go
Red Hat
Medium
Fix reported
2026-09-29
Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap
CVE-2026-41568 · GHSA-VP62-88P7-QQF5
Version ranges need review.
github.com/docker/docker
github.com/moby/moby/v2
Go
Red Hat
Medium
Fix reported
2026-09-10
Escaper bypass leads to XSS in html/template
CVE-2026-39826 · GO-2026-4980
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-08-31
Bypass of meta content URL escaping causes XSS in html/template
CVE-2026-39823 · GO-2026-4982
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-08-31
Handshake messages may be processed at the incorrect encryption level in crypto/tls
CVE-2025-61730 · GO-2026-4340
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-08-07
Kratos has a Confused Deputy issue
CVE-2026-6993 · GHSA-JJ45-XVQ5-RHH9
Version ranges need review.
github.com/go-kratos/kratos/v2
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
No fix reported
2026-07-24
Quadratic complexity when parsing some invalid inputs in encoding/pem
CVE-2025-61723 · GO-2025-4009
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-05-15
CrossOriginProtection insecure bypass patterns not limited to exact matches in net/http
CVE-2025-47910 · GO-2025-3955
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-05-15
ALPN negotiation error contains attacker controlled information in crypto/tls
CVE-2025-58189 · GO-2025-4008
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-05-15
Parsing DER payload can cause memory exhaustion in encoding/asn1
CVE-2025-58185 · GO-2025-4011
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-05-15
Improper access to parent directory of root in os
CVE-2025-22873 · GO-2026-4403
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-05-15
