Security
فارسی
All products

Red Hat Ceph Storage 8/rhceph/oauth2-proxy-rhel9

Red Hat · Package
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/netCVE-2026-33814 · GO-2026-4918 golang.org/x/netstdlib GoRed Hat High Fix reported
HTTP/2 transport accepts malformed framing-related headers in net/httpCVE-2026-78660 · GO-2026-6610 golang.org/x/netstdlib GoRed Hat Medium Fix reported
Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/htmlCVE-2026-42502 · GO-2026-5027 golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
opentelemetry-go's baggage parsing no longer caps raw header lengthCVE-2026-41178 · GHSA-5WRP-CWCJ-Q835 go.opentelemetry.io/otel/baggagego.opentelemetry.io/otel/propagation GoRed Hat Medium Fix reported
Go Net HTML parser is vulnerable to denial of serviceCVE-2026-25680 · GHSA-5CV4-JP36-H3MWVersion ranges need review. golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
golang.org/x/net vulnerable to Cross-site ScriptingCVE-2025-22872 · GHSA-VVGC-356P-C3XWVersion ranges need review. golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 GoRed Hat Medium Fix reported
go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishmentCVE-2025-29923 · GHSA-92CP-5422-2MW7Version ranges need review. github.com/redis/go-redis/v7github.com/redis/go-redis/v8 GoRed Hat Low Fix reported
DoS in go-jose ParsingCVE-2025-27144 · GHSA-C6GW-W398-HV78Version ranges need review. github.com/go-jose/go-jose/v3github.com/go-jose/go-jose/v4 GoRed Hat Medium Fix reported
Non-linear parsing of case-insensitive content in golang.org/x/net/htmlCVE-2024-45338 · GHSA-W32M-9786-JP63 golang.org/x/net/htmlgolang.org/x/net GoRed Hat High Fix reported
Excessive resource consumption when printing error string for host certificate validation in crypto/x509CVE-2025-61729 · GO-2025-4155 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 GoRed Hat High Fix reported
OAuth2-Proxy is vulnerable to header smuggling via underscore leading to potential privilege escalationCVE-2025-64484 · GHSA-VJRC-MH2V-45X6Version ranges need review. github.com/oauth2-proxy/oauth2-proxy/v7github.com/oauth2-proxy/oauth2-proxy GoRed Hat High Fix reported
OAuth2-Proxy has authentication bypass in oauth2-proxy skip_auth_routes due to Query Parameter inclusionCVE-2025-54576 · GHSA-7RH7-C77V-6434Version ranges need review. github.com/oauth2-proxy/oauth2-proxy/v7github.com/oauth2-proxy/oauth2-proxy GoRed Hat Critical Fix reported