Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/config-policy-controller-rhel9
Red Hat
· Package
18 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Arbitrary inputs are included in errors without any escaping in net/textproto
CVE-2026-42507 · GO-2026-5039
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-10-03
Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html
CVE-2026-42502 · GO-2026-5027
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-22
Go Net HTML parser is vulnerable to denial of service
CVE-2026-25680 · GHSA-5CV4-JP36-H3MW
Version ranges need review.
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
golang.org/x/net/html has a Quadratic Parsing Complexity issue
CVE-2025-47911 · GHSA-W4GW-W5JQ-G9JH
golang.org/x/net/html
golang.org/x/net
Go
Red Hat
Medium
Fix reported
2026-09-10
Logrus is vulnerable to DoS when using Entry.Writer()
CVE-2025-65637 · GHSA-4F99-4Q7P-P3GH
Version ranges need review.
github.com/sirupsen/logrus
Confidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9
Go
Red Hat
High
Fix reported
2026-09-10
golang.org/x/net vulnerable to Cross-site Scripting
CVE-2025-22872 · GHSA-VVGC-356P-C3XW
Version ranges need review.
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8
Go
Red Hat
Medium
Fix reported
2026-09-10
golang.org/x/text/language Out-of-bounds Read vulnerability
CVE-2021-38561 · GHSA-PPP9-7JFF-5VJ2
Version ranges need review.
golang.org/x/text
OpenShift Developer Tools and Services/odo
Go
Red Hat
High
Fix reported
2026-09-10
yaml package for Go can consume excessive amounts of CPU or memory
CVE-2022-3064 · GHSA-6Q6Q-88XP-6F2R
Version ranges need review.
gopkg.in/yaml.v2
Cryostat 2/cryostat-tech-preview/cryostat-rhel8-operator
Go
Red Hat
High
Fix reported
2026-09-10
golang.org/x/text/language Denial of service via crafted Accept-Language header
CVE-2022-32149 · GHSA-69CH-W2M2-3VJP
Version ranges need review.
golang.org/x/text
OpenShift Developer Tools and Services/odo
Go
Red Hat
High
Fix reported
2026-09-10
x/crypto/ssh vulnerable to panic via malformed packets
CVE-2021-43565 · GHSA-GWC9-M7RH-J2WW
Version ranges need review.
golang.org/x/crypto
Migration Toolkit for Containers/rhmtc/openshift-migration-velero-rhel8
Go
Red Hat
High
Fix reported
2026-09-10
ReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil
CVE-2026-39825 · GO-2026-4976
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-08-31
Escaper bypass leads to XSS in html/template
CVE-2026-39826 · GO-2026-4980
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-08-31
Bypass of meta content URL escaping causes XSS in html/template
CVE-2026-39823 · GO-2026-4982
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-08-31
Infinite parsing loop in golang.org/x/net
CVE-2025-58190 · GO-2026-4441
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
Go
Red Hat
Medium
Fix reported
2026-05-15
Sensitive headers incorrectly sent after cross-domain redirect in net/http
CVE-2024-45336 · GO-2025-3420
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8
Go
Red Hat
Medium
Fix reported
2026-02-17
Panic due to large inputs affecting P-256 curves in crypto/elliptic
CVE-2022-28327 · GO-2022-0435
stdlib
Migration Toolkit for Containers/cpma
Go
Red Hat
Medium
Fix reported
2024-05-20
Stack overflow from a large amount of PEM data in encoding/pem
CVE-2022-24675 · GO-2022-0433
stdlib
Migration Toolkit for Containers/cpma
Go
Red Hat
Medium
Fix reported
2024-05-20
Session tickets lack random ticket_age_add in crypto/tls
CVE-2022-30629 · GO-2022-0531
stdlib
Migration Toolkit for Containers/cpma
Go
Red Hat
Low
Fix reported
2024-05-20
