Security
فارسی
All products

Builds for Red Hat OpenShift/openshift-builds/openshift-builds-shared-resource-webhook-rhel9

Red Hat · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Requests vulnerable to .netrc credentials leak via malicious URLsCVE-2024-47081 · GHSA-9HJG-9R4M-MVJ7Version ranges need review. requestsAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 PyPIRed Hat Medium Fix reported
urllib3 streaming API improperly handles highly compressed dataCVE-2025-66471 · GHSA-2XPW-W6GG-JR37Version ranges need review. urllib3Builds for Red Hat OpenShift/openshift-builds/openshift-builds-shared-resource-webhook-rhel9 PyPIRed Hat High Fix reported
Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/htmlCVE-2026-42502 · GO-2026-5027 golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
kube-controller-manager is vulnerable to half-blind Server Side Request Forgery through in-tree Portworx StorageClassCVE-2025-13281 · GHSA-R6J8-C6R2-37RRVersion ranges need review. k8s.io/kubernetesBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-shared-resource-rhel9 GoRed Hat Medium Fix reported
Go Net HTML parser is vulnerable to denial of serviceCVE-2026-25680 · GHSA-5CV4-JP36-H3MWVersion ranges need review. golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
golang.org/x/net/html has a Quadratic Parsing Complexity issueCVE-2025-47911 · GHSA-W4GW-W5JQ-G9JH golang.org/x/net/htmlgolang.org/x/net GoRed Hat Medium Fix reported
urllib3 redirects are not disabled when retries are disabled on PoolManager instantiationCVE-2025-50181 · GHSA-PQ67-6M6Q-MJ2VVersion ranges need review. urllib3Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 PyPIRed Hat Medium Fix reported
golang.org/x/net vulnerable to Cross-site ScriptingCVE-2025-22872 · GHSA-VVGC-356P-C3XWVersion ranges need review. golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 GoRed Hat Medium Fix reported
urllib3 does not control redirects in browsers and Node.jsCVE-2025-50182 · GHSA-48P4-8XCF-VXJ5Version ranges need review. urllib3Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 PyPIRed Hat Medium Fix reported
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/netCVE-2025-22870 · GHSA-QXP5-GWG8-XV66Version ranges need review. golang.org/x/netstdlib GoRed Hat Medium Fix reported
Node Denial of Service via kubelet Checkpoint APICVE-2025-0426 · GHSA-JGFP-53C3-624WVersion ranges need review. k8s.io/kubernetesBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-shared-resource-rhel9 GoRed Hat Medium Fix reported
Usage of ExtKeyUsageAny disables policy validation in crypto/x509CVE-2025-22874 · GO-2025-3749 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 GoRed Hat High Fix reported
Infinite parsing loop in golang.org/x/netCVE-2025-58190 · GO-2026-4441 golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 GoRed Hat Medium Fix reported