Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat OpenShift Container Platform 4/redhat/redhat-operator-index
Red Hat
· Package
9 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
go-git missing validation decoding Index v4 files leads to panic
CVE-2026-33762 · GHSA-GM2X-2G9H-CCM8
Version ranges need review.
github.com/go-git/go-git/v4
github.com/go-git/go-git/v5
Go
Red Hat
Low
Fix reported
2026-11-03
go-git improperly verifies data integrity values for .idx and .pack files
CVE-2026-25934 · GHSA-37CX-329C-33X3
Version ranges need review.
github.com/go-git/go-git/v4
github.com/go-git/go-git/v5
Go
Red Hat
Medium
Fix reported
2026-09-10
containerd CRI server: Host memory exhaustion through Attach goroutine leak
CVE-2025-64329 · GHSA-M6HQ-P25P-FFR2
Version ranges need review.
github.com/containerd/containerd/v2
github.com/containerd/containerd
Go
Red Hat
Medium
Fix reported
2026-09-10
go-git: Credential leak via cross-host redirect in smart HTTP transport
CVE-2026-41506 · GHSA-3XC5-WRHM-F963
Version ranges need review.
github.com/go-git/go-git/v5
github.com/go-git/go-git/v6
Go
Red Hat
Medium
Fix reported
2026-09-10
Distribution affected by pull-through cache credential exfiltration via www-authenticate bearer realm
CVE-2026-33540 · GHSA-3P65-76G6-3W7R
Version ranges need review.
github.com/distribution/distribution/v3
github.com/distribution/distribution
Go
Red Hat
High
Fix reported
2026-09-10
go-git: Maliciously crafted idx file can cause asymmetric memory consumption
CVE-2026-34165 · GHSA-JHF3-XXHW-2WPP
Version ranges need review.
github.com/go-git/go-git/v4
github.com/go-git/go-git/v5
Go
Red Hat
Medium
Fix reported
2026-09-10
golang.org/x/net/html has a Quadratic Parsing Complexity issue
CVE-2025-47911 · GHSA-W4GW-W5JQ-G9JH
golang.org/x/net/html
golang.org/x/net
Go
Red Hat
Medium
Fix reported
2026-09-10
go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment
CVE-2025-29923 · GHSA-92CP-5422-2MW7
Version ranges need review.
github.com/redis/go-redis/v7
github.com/redis/go-redis/v8
Go
Red Hat
Low
Fix reported
2026-09-10
Distribution's tag deletion bypasses `storage.delete.enabled` configuration
CVE-2026-41888 · GHSA-6PJF-3R9X-M592
Version ranges need review.
github.com/distribution/distribution/v3
github.com/distribution/distribution
Go
Red Hat
Medium
Fix reported
2026-08-18
