Red Hat OpenShift Virtualization 4/container-native-virtualization/virt-cdi-uploadserver

Red Hat · Package

11 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swapCVE-2026-41568 · GHSA-VP62-88P7-QQF5Version ranges need review.	github.com/docker/docker github.com/moby/moby/v2	GoRed Hat	Medium	Fix reported	2026-09-10
Docker: Race condition in docker cp allows bind mount redirection to host pathCVE-2026-42306 · GHSA-RG2X-37C3-W2RHVersion ranges need review.	github.com/docker/docker github.com/moby/moby/v2	GoRed Hat	High	Fix reported	2026-09-10
Logrus is vulnerable to DoS when using Entry.Writer()CVE-2025-65637 · GHSA-4F99-4Q7P-P3GHVersion ranges need review.	github.com/sirupsen/logrus Confidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9	GoRed Hat	High	Fix reported	2026-09-10
github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archivesCVE-2025-58058 · GHSA-JC7W-C686-C4V9Version ranges need review.	github.com/ulikunitz/xz Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9	GoRed Hat	Medium	Fix reported	2026-09-10
github.com/containers/image allows unexpected authenticated registry accessesCVE-2024-3727 · GHSA-6WVF-F2VW-3425Version ranges need review.	github.com/containers/image/v5 github.com/containers/image	GoRed Hat	High	Fix reported	2026-09-10
Misdirected I/O in syscallCVE-2021-44717 · GO-2022-0289	stdlib Migration Toolkit for Containers/cpma	GoRed Hat	Medium	Fix reported	2024-05-20
Incorrect access control in the go command in cmd/go/internal/modfetchCVE-2022-23773 · GO-2022-0318	toolchain Migration Toolkit for Containers/cpma	GoRed Hat	Medium	Fix reported	2024-05-20
Incorrect computation for some invalid field elements in crypto/ellipticCVE-2022-23806 · GO-2021-0319	stdlib Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator	GoRed Hat	Medium	Fix reported	2024-05-20
Stack exhaustion when compiling deeply nested expressions in regexpCVE-2022-24921 · GO-2021-0347	stdlib Migration Toolkit for Containers/cpma	GoRed Hat	Medium	Fix reported	2024-05-20
golang.org/x/net/http2 allows uncontrolled memory consumptionCVE-2021-44716 · GHSA-VC3P-29H2-GPCP	golang.org/x/net/http2 golang.org/x/net	GoRed Hat	High	Fix reported	2024-05-20
golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octetCVE-2021-29923	Migration Toolkit for Containers/rhmtc/openshift-migration-must-gather-rhel8 Migration Toolkit for Containers/rhmtc/openshift-migration-registry-rhel8	Red Hat	Medium	No fix reported	Not recorded