Red Hat OpenShift Virtualization 4/container-native-virtualization/virt-cdi-importer

Red Hat · Package

10 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swapCVE-2026-41568 · GHSA-VP62-88P7-QQF5Version ranges need review.	github.com/docker/docker github.com/moby/moby/v2	GoRed Hat	Medium	Fix reported	2026-09-10
Docker: Race condition in docker cp allows bind mount redirection to host pathCVE-2026-42306 · GHSA-RG2X-37C3-W2RHVersion ranges need review.	github.com/docker/docker github.com/moby/moby/v2	GoRed Hat	High	Fix reported	2026-09-10
Logrus is vulnerable to DoS when using Entry.Writer()CVE-2025-65637 · GHSA-4F99-4Q7P-P3GHVersion ranges need review.	github.com/sirupsen/logrus Confidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9	GoRed Hat	High	Fix reported	2026-09-10
github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archivesCVE-2025-58058 · GHSA-JC7W-C686-C4V9Version ranges need review.	github.com/ulikunitz/xz Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9	GoRed Hat	Medium	Fix reported	2026-09-10
github.com/containers/image allows unexpected authenticated registry accessesCVE-2024-3727 · GHSA-6WVF-F2VW-3425Version ranges need review.	github.com/containers/image/v5 github.com/containers/image	GoRed Hat	High	Fix reported	2026-09-10
Clarify Content-Type handlingCVE-2021-41190 · GHSA-MC8V-MGRF-8F4M	github.com/opencontainers/distribution-spec Red Hat Enterprise Linux 8/container-tools:2.0/buildah	GoRed Hat	Low	Fix reported	2026-07-08
Panic in ReverseProxy in net/http/httputilCVE-2021-36221 · GO-2021-0245	stdlib OpenShift Serverless/knative-eventing	GoRed Hat	Medium	Fix reported	2024-05-20
Incorrect access control in the go command in cmd/go/internal/modfetchCVE-2022-23773 · GO-2022-0318	toolchain Migration Toolkit for Containers/cpma	GoRed Hat	Medium	Fix reported	2024-05-20
Stack exhaustion when compiling deeply nested expressions in regexpCVE-2022-24921 · GO-2021-0347	stdlib Migration Toolkit for Containers/cpma	GoRed Hat	Medium	Fix reported	2024-05-20
golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octetCVE-2021-29923	Migration Toolkit for Containers/rhmtc/openshift-migration-must-gather-rhel8 Migration Toolkit for Containers/rhmtc/openshift-migration-registry-rhel8	Red Hat	Medium	No fix reported	Not recorded