Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat OpenShift Virtualization 4/container-native-virtualization/hyperconverged-cluster-operator-rhel9
Red Hat
· Package
11 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls
CVE-2026-118264 · GHSA-CXF3-9H37-7RR8
Version ranges need review.
github.com/labstack/echo/v4
github.com/labstack/echo/v5
Go
Red Hat
Critical
Fix reported
2026-11-06
Memory exhaustion in query parameter parsing in net/url
CVE-2025-61726 · GO-2026-4341
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
Go
Red Hat
High
Fix reported
2026-10-03
Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html
CVE-2026-25681 · GO-2026-5029
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
High
Fix reported
2026-09-22
jwt-go allows excessive memory allocation during header parsing
CVE-2025-30204 · GHSA-MH63-6H87-95CP
Version ranges need review.
github.com/golang-jwt/jwt/v4
github.com/golang-jwt/jwt/v5
Go
Red Hat
High
Fix reported
2026-09-10
urllib3: Sensitive headers forwarded across origins in proxied low-level redirects
CVE-2026-44431 · GHSA-QCCP-GFCP-XXVC
Version ranges need review.
urllib3
Exploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9
PyPI
Red Hat
High
Fix reported
2026-09-10
go-git: Credential leak via cross-host redirect in smart HTTP transport
CVE-2026-41506 · GHSA-3XC5-WRHM-F963
Version ranges need review.
github.com/go-git/go-git/v5
github.com/go-git/go-git/v6
Go
Red Hat
Medium
Fix reported
2026-09-10
golang.org/x/net/html has a Quadratic Parsing Complexity issue
CVE-2025-47911 · GHSA-W4GW-W5JQ-G9JH
golang.org/x/net/html
golang.org/x/net
Go
Red Hat
Medium
Fix reported
2026-09-10
Logrus is vulnerable to DoS when using Entry.Writer()
CVE-2025-65637 · GHSA-4F99-4Q7P-P3GH
Version ranges need review.
github.com/sirupsen/logrus
Confidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9
Go
Red Hat
High
Fix reported
2026-09-10
golang.org/x/net vulnerable to Cross-site Scripting
CVE-2025-22872 · GHSA-VVGC-356P-C3XW
Version ranges need review.
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8
Go
Red Hat
Medium
Fix reported
2026-09-10
Excessive resource consumption when printing error string for host certificate validation in crypto/x509
CVE-2025-61729 · GO-2025-4155
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
Go
Red Hat
High
Fix reported
2026-08-14
container-native-virtualization: privilege escalation via excessive /etc/passwd permissions
CVE-2025-57848
Red Hat OpenShift Virtualization 4/container-native-virtualization/hyperconverged-cluster-operator-rhel9
Red Hat OpenShift Virtualization 4/container-native-virtualization/hyperconverged-cluster-operator
Red Hat
Medium
No fix reported
Not recorded
