Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat OpenShift Container Platform 4/openshift4/ose-contour-rhel8
Red Hat
· Package
8 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net
CVE-2026-33814 · GO-2026-4918
golang.org/x/net
stdlib
Go
Red Hat
High
Fix reported
2026-10-16
HTTP/2 rapid reset can cause excessive work in net/http
CVE-2023-39325 · GHSA-4374-P667-P6C8
Version ranges need review.
golang.org/x/net
stdlib
Go
Red Hat
High
Fix reported
2026-09-28
cert-manager ha a potential slowdown / DoS when parsing specially crafted PEM inputs
CVE-2024-12401 · GHSA-R4PG-VG54-WXX4
Version ranges need review.
github.com/cert-manager/cert-manager
Cryostat 3/cryostat-tech-preview/cryostat-rhel8-operator
Go
Red Hat
Medium
Fix reported
2026-09-10
go-retryablehttp can leak basic auth credentials to log files
CVE-2024-6104 · GHSA-V6V8-XJ6M-XWQH
Version ranges need review.
github.com/hashicorp/go-retryablehttp
OpenShift API for Data Protection/oadp/oadp-kubevirt-velero-plugin-rhel8
Go
Red Hat
Medium
Fix reported
2026-09-10
Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2024-28180 · GHSA-C5Q2-7R4C-MV6G
Version ranges need review.
github.com/go-jose/go-jose/v3
github.com/go-jose/go-jose/v4
Go
Red Hat
Medium
Fix reported
2026-09-10
Uncontrolled Resource Consumption in promhttp
CVE-2022-21698 · GHSA-CG3Q-J54F-5P7P
Version ranges need review.
github.com/prometheus/client_golang
Cost Management Metrics Operator/costmanagement-metrics-operator-container
Go
Red Hat
High
Fix reported
2026-09-10
Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled
CVE-2026-50149 · GHSA-G3XR-5W5J-W4Q4
Version ranges need review.
github.com/projectcontour/contour
ExternalDNS Operator/edo/external-dns-rhel8
Go
Red Hat
Medium
Fix reported
2026-08-26
envoy: HTTP/2 CPU exhaustion due to CONTINUATION frame flood
CVE-2024-30255
Custom Metric Autoscaler operator for Red Hat Openshift/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel8
Logical Volume Manager Storage/lvms4/topolvm-rhel8
Red Hat
Medium
No fix reported
Not recorded
