All products

Red Hat OpenShift Container Platform 4/openshift4/ose-cloud-credential-operator

Red Hat · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/netCVE-2026-33814 · GO-2026-4918 golang.org/x/netstdlib GoRed Hat High Fix reported
Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/htmlCVE-2026-42502 · GO-2026-5027 golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
Insecure Temporary File usage in github.com/golang/glogCVE-2024-45339 · GHSA-6WXM-MPQJ-6JPFVersion ranges need review. github.com/golang/glogMulticluster Engine for Kubernetes/multicluster-engine/assisted-service-9-rhel9 GoRed Hat Medium Fix reported
Go Net HTML parser is vulnerable to denial of serviceCVE-2026-25680 · GHSA-5CV4-JP36-H3MWVersion ranges need review. golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
golang.org/x/net/html has a Quadratic Parsing Complexity issueCVE-2025-47911 · GHSA-W4GW-W5JQ-G9JH golang.org/x/net/htmlgolang.org/x/net GoRed Hat Medium Fix reported
golang.org/x/text Infinite loopCVE-2020-14040 · GHSA-5RCV-M4M3-HFH7Version ranges need review. golang.org/x/textOpenShift Developer Tools and Services/jenkins-operator-container GoRed Hat Medium Fix reported
go.mongodb.org/mongo-driver improperly validates cstrings when marshalling Go objects into BSONCVE-2021-20329 · GHSA-F6MQ-5M25-4R72Version ranges need review. go.mongodb.org/mongo-driverMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
cloud-credential-operator: CCO Mint-mode CredentialsRequest manifests grant account-wide IAM access beyond cluster scope on AWSCVE-2026-10843 Red Hat OpenShift Container Platform 4/openshift4/ose-cloud-credential-operatorRed Hat OpenShift Container Platform 4/openshift4/ose-cloud-credential-rhel9-operator Red Hat High No fix reported