Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat OpenShift Dev Spaces/devspaces/configbump-rhel9
Red Hat
· Package
12 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
golang.org/x/crypto vulnerable to infinite loop on large channel writes
CVE-2026-39834 · GHSA-RM3J-F69W-WQMQ
Version ranges need review.
golang.org/x/crypto
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Critical
Fix reported
2026-09-22
golang.org/x/crypto: Invoking memory leak when rejecting channels can lead to DoS
CVE-2026-39827 · GHSA-QPW4-5X99-6VJP
Version ranges need review.
golang.org/x/crypto
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-22
golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read
CVE-2025-47914 · GHSA-F6X5-JH6R-WRFV
Version ranges need review.
golang.org/x/crypto
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption
CVE-2025-58181 · GHSA-J5W8-Q4QC-RX2X
Version ranges need review.
golang.org/x/crypto
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
github.com/go-acme/lego/v4/acme/api does not enforce HTTPS
CVE-2025-54799 · GHSA-Q82R-2J7M-9RV4
Version ranges need review.
github.com/go-acme/lego/v3
github.com/go-acme/lego/v4
Go
Red Hat
Low
Fix reported
2026-09-10
tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter
CVE-2025-54798 · GHSA-52F5-9888-HMC6
tmp
Cryostat 4/io.cryostat-cryostat
npm
Red Hat
Low
Fix reported
2026-09-10
Incorrect results returned from Rows.Scan in database/sql
CVE-2025-47907 · GO-2025-3849
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
Go
Red Hat
Medium
Fix reported
2026-05-30
Excessive CPU consumption in ParseAddress in net/mail
CVE-2025-61725 · GO-2025-4006
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-05-15
Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion
CVE-2025-55199 · GHSA-9H84-QMV7-982P
Version ranges need review.
helm.sh/helm/v3
helm.sh/helm
Go
Red Hat
Medium
Fix reported
2026-02-04
Helm May Panic Due To Incorrect YAML Content
CVE-2025-55198 · GHSA-F9F8-9PMF-XV68
Version ranges need review.
helm.sh/helm/v3
helm.sh/helm
Go
Red Hat
Medium
Fix reported
2026-02-04
xmltodict: xmltodict XML Injection
CVE-2025-9375
OpenShift Service Mesh 3/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9
OpenShift Service Mesh 3/openshift-service-mesh/istio-cni-rhel9
Red Hat
Medium
No fix reported
Not recorded
fast-redact: fast-redact prototype pollution
CVE-2025-57319
Multicluster Engine for Kubernetes/multicluster-engine/console-mce-rhel8
Multicluster Engine for Kubernetes/multicluster-engine/console-mce-rhel9
Red Hat
Medium
No fix reported
Not recorded
