Red Hat OpenShift Container Platform 4/openshift4/ose-alibaba-cloud-csi-driver-container-rhel8

Red Hat · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/netCVE-2026-33814 · GO-2026-4918	golang.org/x/net stdlib	GoRed Hat	High	Fix reported	2026-10-16
golang.org/x/crypto: Invoking memory leak when rejecting channels can lead to DoSCVE-2026-39827 · GHSA-QPW4-5X99-6VJPVersion ranges need review.	golang.org/x/crypto Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9	GoRed Hat	Medium	Fix reported	2026-09-22
Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swapCVE-2026-41568 · GHSA-VP62-88P7-QQF5Version ranges need review.	github.com/docker/docker github.com/moby/moby/v2	GoRed Hat	Medium	Fix reported	2026-09-10
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/netCVE-2025-22870 · GHSA-QXP5-GWG8-XV66Version ranges need review.	golang.org/x/net stdlib	GoRed Hat	Medium	Fix reported	2026-09-10
Node Denial of Service via kubelet Checkpoint APICVE-2025-0426 · GHSA-JGFP-53C3-624WVersion ranges need review.	k8s.io/kubernetes Builds for Red Hat OpenShift/openshift-builds/openshift-builds-shared-resource-rhel9	GoRed Hat	Medium	Fix reported	2026-09-10
Files or Directories Accessible to External Parties in kubernetesCVE-2021-25741 · GHSA-F5F7-6478-QM6PVersion ranges need review.	k8s.io/kubernetes Red Hat OpenShift Container Platform 4/openshift4/ose-alibaba-cloud-csi-driver-container-rhel8	GoRed Hat	High	Fix reported	2026-09-10
goproxy Denial of Service vulnerabilityCVE-2023-37788 · GHSA-4R8X-2P26-976PVersion ranges need review.	github.com/elazarl/goproxy Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator	GoRed Hat	High	Fix reported	2026-08-07