Red Hat OpenShift Container Platform 4/openshift4/ose-aws-cluster-api-controllers-rhel8

Red Hat · Package

11 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/netCVE-2026-33814 · GO-2026-4918	golang.org/x/net stdlib	GoRed Hat	High	Fix reported	2026-10-16
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistecCVE-2025-22866 · GO-2025-3447	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8	GoRed Hat	Medium	Fix reported	2026-09-29
Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/htmlCVE-2026-42502 · GO-2026-5027	golang.org/x/net Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9	GoRed Hat	Medium	Fix reported	2026-09-22
Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swapCVE-2026-41568 · GHSA-VP62-88P7-QQF5Version ranges need review.	github.com/docker/docker github.com/moby/moby/v2	GoRed Hat	Medium	Fix reported	2026-09-10
Insecure Temporary File usage in github.com/golang/glogCVE-2024-45339 · GHSA-6WXM-MPQJ-6JPFVersion ranges need review.	github.com/golang/glog Multicluster Engine for Kubernetes/multicluster-engine/assisted-service-9-rhel9	GoRed Hat	Medium	Fix reported	2026-09-10
Go Net HTML parser is vulnerable to denial of serviceCVE-2026-25680 · GHSA-5CV4-JP36-H3MWVersion ranges need review.	golang.org/x/net Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9	GoRed Hat	Medium	Fix reported	2026-09-10
golang.org/x/net/html has a Quadratic Parsing Complexity issueCVE-2025-47911 · GHSA-W4GW-W5JQ-G9JH	golang.org/x/net/html golang.org/x/net	GoRed Hat	Medium	Fix reported	2026-09-10
CIRCL-Fourq: Missing and wrong validation can lead to incorrect resultsCVE-2025-8556 · GHSA-2X5J-VHC8-9CWMVersion ranges need review.	github.com/cloudflare/circl Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9	GoRed Hat	Low	Fix reported	2026-09-10
Non-linear parsing of case-insensitive content in golang.org/x/net/htmlCVE-2024-45338 · GHSA-W32M-9786-JP63	golang.org/x/net/html golang.org/x/net	GoRed Hat	High	Fix reported	2026-09-10
go.mongodb.org/mongo-driver improperly validates cstrings when marshalling Go objects into BSONCVE-2021-20329 · GHSA-F6MQ-5M25-4R72Version ranges need review.	go.mongodb.org/mongo-driver Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9	GoRed Hat	Medium	Fix reported	2024-09-17
NetworkManager: NetworkManager: Local privilege escalation via malformed MUD URLs in dhclient backendCVE-2026-10805	Multicluster Engine for Kubernetes/multicluster-engine/cluster-api-provider-aws-rhel9 Red Hat JBoss Enterprise Application Platform Expansion Pack/networkmanager	Red Hat	Medium	No fix reported	Not recorded