Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-validation-rhel9
Red Hat
· Package
12 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSON
CVE-2024-24786 · GHSA-8R3F-844C-MC37
Version ranges need review.
google.golang.org/protobuf/encoding/protojson
google.golang.org/protobuf/internal/encoding/json
Go
Red Hat
Medium
Fix reported
2026-10-14
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec
CVE-2025-22866 · GO-2025-3447
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8
Go
Red Hat
Medium
Fix reported
2026-09-29
containerd CRI checkpoint restore CDI annotation smuggling
CVE-2026-53492 · GHSA-33VJ-92QQ-66HC
Version ranges need review.
github.com/containerd/containerd/v2
github.com/containerd/containerd
Go
Red Hat
High
Fix reported
2026-09-10
containerd CRI server: Host memory exhaustion through Attach goroutine leak
CVE-2025-64329 · GHSA-M6HQ-P25P-FFR2
Version ranges need review.
github.com/containerd/containerd/v2
github.com/containerd/containerd
Go
Red Hat
Medium
Fix reported
2026-09-10
gRPC-Go has an authorization bypass via missing leading slash in :path
CVE-2026-33186 · GHSA-P77J-4MVH-X3M3
Version ranges need review.
google.golang.org/grpc
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Critical
Fix reported
2026-09-10
golang.org/x/net vulnerable to Cross-site Scripting
CVE-2025-22872 · GHSA-VVGC-356P-C3XW
Version ranges need review.
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8
Go
Red Hat
Medium
Fix reported
2026-09-10
OPA server Data API HTTP path injection of Rego
CVE-2025-46569 · GHSA-6M8W-JC87-6CR7
Version ranges need review.
github.com/open-policy-agent/opa/server
github.com/open-policy-agent/opa/v1/server
Go
Red Hat
High
Fix reported
2026-09-10
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net
CVE-2025-22870 · GHSA-QXP5-GWG8-XV66
Version ranges need review.
golang.org/x/net
stdlib
Go
Red Hat
Medium
Fix reported
2026-09-10
containerd has an integer overflow in User ID handling
CVE-2024-40635 · GHSA-265R-HFXG-FHMG
Version ranges need review.
github.com/containerd/containerd/v2
github.com/containerd/containerd
Go
Red Hat
Medium
Fix reported
2026-09-10
Excessive resource consumption when printing error string for host certificate validation in crypto/x509
CVE-2025-61729 · GO-2025-4155
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
Go
Red Hat
High
Fix reported
2026-08-14
Sensitive headers incorrectly sent after cross-domain redirect in net/http
CVE-2024-45336 · GO-2025-3420
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8
Go
Red Hat
Medium
Fix reported
2026-02-17
Gin mishandles a wildcard at the end of an origin string
CVE-2019-25211 · GHSA-869C-J7WC-8JQV
Version ranges need review.
github.com/gin-contrib/cors
github.com/gin-gonic/gin
Go
Red Hat
Critical
Fix reported
2025-11-04