Red Hat OpenShift Container Platform 4/openshift3/ose-operator-lifecycle-manager

Red Hat · Package

5 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/htmlCVE-2026-25681 · GO-2026-5029	golang.org/x/net Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9	GoRed Hat	High	Fix reported	2026-09-22
go-git: Credential leak via cross-host redirect in smart HTTP transportCVE-2026-41506 · GHSA-3XC5-WRHM-F963Version ranges need review.	github.com/go-git/go-git/v5 github.com/go-git/go-git/v6	GoRed Hat	Medium	Fix reported	2026-09-10
Distribution affected by pull-through cache credential exfiltration via www-authenticate bearer realmCVE-2026-33540 · GHSA-3P65-76G6-3W7RVersion ranges need review.	github.com/distribution/distribution/v3 github.com/distribution/distribution	GoRed Hat	High	Fix reported	2026-09-10
Distribution: stale blob access resurrection via repo-scoped redis descriptor cache invalidationCVE-2026-35172 · GHSA-F2G3-HH2R-CWGCVersion ranges need review.	github.com/distribution/distribution/v3 github.com/distribution/distribution	GoRed Hat	High	Fix reported	2026-08-19
Distribution's tag deletion bypasses `storage.delete.enabled` configurationCVE-2026-41888 · GHSA-6PJF-3R9X-M592Version ranges need review.	github.com/distribution/distribution/v3 github.com/distribution/distribution	GoRed Hat	Medium	Fix reported	2026-08-18