Red Hat OpenShift Virtualization 4/container-native-virtualization/cnv-containernetworking-plugins-rhel9

Red Hat · Package

6 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Memory exhaustion in query parameter parsing in net/urlCVE-2025-61726 · GO-2026-4341	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	GoRed Hat	High	Fix reported	2026-10-03
go-git: Credential leak via cross-host redirect in smart HTTP transportCVE-2026-41506 · GHSA-3XC5-WRHM-F963Version ranges need review.	github.com/go-git/go-git/v5 github.com/go-git/go-git/v6	GoRed Hat	Medium	Fix reported	2026-09-10
CNA Plugins Portmap nftables backend can intercept non-local trafficCVE-2025-67499 · GHSA-JV3W-X3R3-G6RMVersion ranges need review.	github.com/containernetworking/plugins Red Hat Enterprise Linux 8/container-tools:rhel8/containernetworking-plugins	GoRed Hat	Medium	Fix reported	2026-09-10
runc container escape and denial of service due to arbitrary write gadgets and procfs write redirectsCVE-2025-52881 · GHSA-CGRX-MC8F-2PRMVersion ranges need review.	github.com/opencontainers/runc github.com/opencontainers/selinux	GoRed Hat	High	Fix reported	2026-09-10
Sensitive headers incorrectly sent after cross-domain redirect in net/httpCVE-2024-45336 · GO-2025-3420	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8	GoRed Hat	Medium	Fix reported	2026-02-17
squirrel: Squirrel: Heap-based buffer overflow allows local denial of serviceCVE-2026-8261	Deployment Validation Operator/dvo/deployment-validation-rhel8-operator MCP Server for Red Hat OpenShift/openshift-mcp-beta/openshift-mcp-server-rhel9	Red Hat	Medium	No fix reported	Not recorded