cert-manager Operator for Red Hat OpenShift/cert-manager/cert-manager-istio-csr-rhel9

Red Hat · Package

15 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
compress zstd: Panic on two-block framesCVE-2026-116591 · GHSA-FPMH-FRQ8-7RJ8	github.com/klauspost/compress/zstd github.com/klauspost/compress	GoRed Hat	High	Fix reported	2026-11-06
HTTP/2 transport accepts malformed framing-related headers in net/httpCVE-2026-78660 · GO-2026-6610	golang.org/x/net stdlib	GoRed Hat	Medium	Fix reported	2026-10-16
opentelemetry-go's baggage parsing no longer caps raw header lengthCVE-2026-41178 · GHSA-5WRP-CWCJ-Q835	go.opentelemetry.io/otel/baggage go.opentelemetry.io/otel/propagation	GoRed Hat	Medium	Fix reported	2026-09-10
urllib3 allows an unbounded number of links in the decompression chainCVE-2025-66418 · GHSA-GM62-XV2J-4W53Version ranges need review.	urllib3 Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	PyPIRed Hat	High	Fix reported	2026-09-10
Go Net HTML parser is vulnerable to denial of serviceCVE-2026-25680 · GHSA-5CV4-JP36-H3MWVersion ranges need review.	golang.org/x/net Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9	GoRed Hat	Medium	Fix reported	2026-09-10
urllib3 redirects are not disabled when retries are disabled on PoolManager instantiationCVE-2025-50181 · GHSA-PQ67-6M6Q-MJ2VVersion ranges need review.	urllib3 Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	PyPIRed Hat	Medium	Fix reported	2026-09-10
golang.org/x/net vulnerable to Cross-site ScriptingCVE-2025-22872 · GHSA-VVGC-356P-C3XWVersion ranges need review.	golang.org/x/net Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8	GoRed Hat	Medium	Fix reported	2026-09-10
urllib3 does not control redirects in browsers and Node.jsCVE-2025-50182 · GHSA-48P4-8XCF-VXJ5Version ranges need review.	urllib3 Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	PyPIRed Hat	Medium	Fix reported	2026-09-10
Usage of ExtKeyUsageAny disables policy validation in crypto/x509CVE-2025-22874 · GO-2025-3749	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	GoRed Hat	High	Fix reported	2026-08-27
Incorrect results returned from Rows.Scan in database/sqlCVE-2025-47907 · GO-2025-3849	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	GoRed Hat	Medium	Fix reported	2026-05-30
setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File WriteCVE-2025-47273 · GHSA-5RJG-FVGR-3XXFVersion ranges need review.	setuptools Confidential Compute Attestation/confidential-compute-attestation-tech-preview/trustee-rhel9	PyPIRed Hat	High	Fix reported	2026-05-11
cert-manager-controller DoS via Specially Crafted DNS ResponseCVE-2026-25518 · GHSA-GX3X-VQ4P-MHHVVersion ranges need review.	github.com/cert-manager/cert-manager Cryostat 4/cryostat/cryostat-rhel9-operator	GoRed Hat	Medium	Fix reported	2026-03-16
istio: Istio: Firewall rule injection via annotation allows limited integrity impactCVE-2026-23766	ExternalDNS Operator/edo/external-dns-rhel8 ExternalDNS Operator/edo/external-dns-rhel9	Red Hat	Unknown	No fix reported	Not recorded
istio: Istio: Information disclosure and authentication bypass via JWKS resolver unavailabilityCVE-2026-31837	OpenShift Serverless/openshift-serverless-1/kn-eventing-istio-controller-rhel9 OpenShift Serverless/openshift-serverless-1/net-istio-controller-rhel9	Red Hat	High	No fix reported	Not recorded
istio: Istio: Authorization policy bypass via Envoy RBAC header matching with multiple header valuesCVE-2026-31838	ExternalDNS Operator/edo/external-dns-rhel8 ExternalDNS Operator/edo/external-dns-rhel9	Red Hat	Medium	No fix reported	Not recorded