Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat OpenShift Container Platform 4/openshift4/ose-alibaba-cloud-controller-manager-rhel8
Red Hat
· Package
11 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec
CVE-2025-22866 · GO-2025-3447
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8
Go
Red Hat
Medium
Fix reported
2026-09-29
Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html
CVE-2026-42502 · GO-2026-5027
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-22
Go Net HTML parser is vulnerable to denial of service
CVE-2026-25680 · GHSA-5CV4-JP36-H3MW
Version ranges need review.
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
Non-linear parsing of case-insensitive content in golang.org/x/net/html
CVE-2024-45338 · GHSA-W32M-9786-JP63
golang.org/x/net/html
golang.org/x/net
Go
Red Hat
High
Fix reported
2026-09-10
Supplementary groups are not set up properly in github.com/containerd/containerd
CVE-2023-25173 · GHSA-HMFX-3PCX-653P
Version ranges need review.
github.com/containerd/containerd
Cryostat 2/cryostat-tech-preview/cryostat-rhel8-operator
Go
Red Hat
Medium
Fix reported
2026-09-10
goproxy Denial of Service vulnerability
CVE-2023-37788 · GHSA-4R8X-2P26-976P
Version ranges need review.
github.com/elazarl/goproxy
Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator
Go
Red Hat
High
Fix reported
2026-08-07
Command Injection Vulnerability with Mercurial in VCS
CVE-2022-21235 · GHSA-6635-C626-VJ4R
Version ranges need review.
github.com/Masterminds/vcs
OpenShift Serverless/openshift-serverless-1/ingress-rhel8-operator
Go
Red Hat
Critical
Fix reported
2026-03-16
Helm vulnerable to information disclosure via getHostByName Function
CVE-2023-25165 · GHSA-PWCW-6F5G-GXF8
Version ranges need review.
helm.sh/helm/v3
Cryostat 2/cryostat-tech-preview/cryostat-rhel8-operator
Go
Red Hat
Medium
Fix reported
2026-02-04
golang.org/x/net vulnerable to Uncontrolled Resource Consumption
CVE-2022-41723 · GHSA-VVPX-J8F3-3W6H
Version ranges need review.
golang.org/x/net
stdlib
Go
Red Hat
High
Fix reported
2026-02-04
RandomAlphaNumeric and CryptoRandomAlphaNumeric are not as random as they should be
CVE-2021-4238 · GHSA-XG2H-WX96-XGXR
github.com/Masterminds/goutils
OpenShift Developer Tools and Services/helm
Go
Red Hat
Low
Fix reported
2026-01-24
go.mongodb.org/mongo-driver improperly validates cstrings when marshalling Go objects into BSON
CVE-2021-20329 · GHSA-F6MQ-5M25-4R72
Version ranges need review.
go.mongodb.org/mongo-driver
Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9
Go
Red Hat
Medium
Fix reported
2024-09-17
