Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat OpenShift Container Platform 4/openshift4/ose-openshift-apiserver-rhel8
Red Hat
· Package
16 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
compress zstd: Panic on two-block frames
CVE-2026-116591 · GHSA-FPMH-FRQ8-7RJ8
github.com/klauspost/compress/zstd
github.com/klauspost/compress
Go
Red Hat
High
Fix reported
2026-11-06
Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net
CVE-2026-33814 · GO-2026-4918
golang.org/x/net
stdlib
Go
Red Hat
High
Fix reported
2026-10-16
Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html
CVE-2026-42502 · GO-2026-5027
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-22
Go Net HTML parser is vulnerable to denial of service
CVE-2026-25680 · GHSA-5CV4-JP36-H3MW
Version ranges need review.
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
golang.org/x/net vulnerable to Cross-site Scripting
CVE-2025-22872 · GHSA-VVGC-356P-C3XW
Version ranges need review.
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8
Go
Red Hat
Medium
Fix reported
2026-09-10
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net
CVE-2025-22870 · GHSA-QXP5-GWG8-XV66
Version ranges need review.
golang.org/x/net
stdlib
Go
Red Hat
Medium
Fix reported
2026-09-10
Node Denial of Service via kubelet Checkpoint API
CVE-2025-0426 · GHSA-JGFP-53C3-624W
Version ranges need review.
k8s.io/kubernetes
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-shared-resource-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
distribution catalog API endpoint can lead to OOM via malicious user input
CVE-2023-2253 · GHSA-HQXW-F8MX-CPMW
github.com/distribution/distribution
github.com/docker/distribution
Go
Red Hat
High
Fix reported
2026-09-10
Uncontrolled Resource Consumption in promhttp
CVE-2022-21698 · GHSA-CG3Q-J54F-5P7P
Version ranges need review.
github.com/prometheus/client_golang
Cost Management Metrics Operator/costmanagement-metrics-operator-container
Go
Red Hat
High
Fix reported
2026-09-10
OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metrics
CVE-2023-45142 · GHSA-RCJV-MGP8-QVMR
Version ranges need review.
go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin
Go
Red Hat
High
Fix reported
2026-09-10
goproxy Denial of Service vulnerability
CVE-2023-37788 · GHSA-4R8X-2P26-976P
Version ranges need review.
github.com/elazarl/goproxy
Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator
Go
Red Hat
High
Fix reported
2026-08-07
Authorization bypass in github.com/dgrijalva/jwt-go
CVE-2020-26160 · GHSA-W73W-5M7G-F7QC
Version ranges need review.
github.com/dgrijalva/jwt-go/v4
github.com/dgrijalva/jwt-go
Go
Red Hat
High
Fix reported
2026-07-08
openshift-apiserver: SSRF via Missing IP/Network-Range Validation in User-Supplied Image References
CVE-2025-14443 · GHSA-GXVV-45F6-3CH8
Version ranges need review.
github.com/openshift/openshift-apiserver
Red Hat OpenShift Container Platform 4/openshift4/ose-openshift-apiserver-rhel8
Go
Red Hat
High
No fix reported
2026-03-23
golang.org/x/net/html Infinite Loop vulnerability
CVE-2021-33194 · GHSA-83G2-8M93-V3W7
Version ranges need review.
golang.org/x/net
Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator
Go
Red Hat
High
Fix reported
2026-02-04
go.mongodb.org/mongo-driver improperly validates cstrings when marshalling Go objects into BSON
CVE-2021-20329 · GHSA-F6MQ-5M25-4R72
Version ranges need review.
go.mongodb.org/mongo-driver
Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9
Go
Red Hat
Medium
Fix reported
2024-09-17
openshift/openshift-apiserver: oauthtokens leaked to logs on panic
CVE-2020-10752
Red Hat OpenShift Container Platform 3.11/atomic-openshift
Red Hat OpenShift Container Platform 4/openshift4/ose-openshift-apiserver-rhel8
Red Hat
Medium
No fix reported
Not recorded
