| Memory exhaustion in query parameter parsing in net/urlCVE-2025-61726 · GO-2026-4341 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 |
GoRed Hat |
High
|
Fix reported |
|
| Unbounded allocation when parsing GNU sparse map in archive/tarCVE-2025-58183 · GO-2025-4014 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
Medium
|
Fix reported |
|
| Timing sidechannel for P-256 on ppc64le in crypto/internal/nistecCVE-2025-22866 · GO-2025-3447 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 |
GoRed Hat |
Medium
|
Fix reported |
|
| pgx: SQL Injection via placeholder confusion with dollar quoted string literalsCVE-2026-41889 · GHSA-J88V-2CHJ-QFWXVersion ranges need review. |
github.com/jackc/pgx/v4github.com/jackc/pgx/v5 |
GoRed Hat |
Low
|
Fix reported |
|
| Denial of service in github.com/jackc/pgproto3/v2CVE-2026-32286 · GHSA-JQCQ-XJH3-6G23Version ranges need review. |
github.com/jackc/pgproto3/v2Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9 |
GoRed Hat |
High
|
No fix reported |
|
| Logrus is vulnerable to DoS when using Entry.Writer()CVE-2025-65637 · GHSA-4F99-4Q7P-P3GHVersion ranges need review. |
github.com/sirupsen/logrusConfidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9 |
GoRed Hat |
High
|
Fix reported |
|
| HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/netCVE-2025-22870 · GHSA-QXP5-GWG8-XV66Version ranges need review. |
golang.org/x/netstdlib |
GoRed Hat |
Medium
|
Fix reported |
|
| pgx SQL Injection via Line Comment CreationCVE-2024-27289 · GHSA-M7WR-2XF7-CM9PVersion ranges need review. |
github.com/jackc/pgx/v4github.com/jackc/pgx |
GoRed Hat |
High
|
Fix reported |
|
| Supplementary groups are not set up properly in github.com/containerd/containerdCVE-2023-25173 · GHSA-HMFX-3PCX-653PVersion ranges need review. |
github.com/containerd/containerdCryostat 2/cryostat-tech-preview/cryostat-rhel8-operator |
GoRed Hat |
Medium
|
Fix reported |
|
| YAML Go package vulnerable to denial of serviceCVE-2021-4235 · GHSA-R88R-GMRH-7J83Version ranges need review. |
github.com/go-yaml/yamlgopkg.in/yaml.v2 |
GoRed Hat |
Medium
|
Fix reported |
|
| Uncontrolled Resource Consumption in promhttpCVE-2022-21698 · GHSA-CG3Q-J54F-5P7PVersion ranges need review. |
github.com/prometheus/client_golangCost Management Metrics Operator/costmanagement-metrics-operator-container |
GoRed Hat |
High
|
Fix reported |
|
| golang.org/x/crypto/ssh Denial of service via crafted SignerCVE-2022-27191 · GHSA-8C26-WMH5-6G9VVersion ranges need review. |
golang.org/x/cryptoMigration Toolkit for Containers/cpma |
GoRed Hat |
High
|
Fix reported |
|
| Excessive resource consumption when printing error string for host certificate validation in crypto/x509CVE-2025-61729 · GO-2025-4155 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 |
GoRed Hat |
High
|
Fix reported |
|
| goproxy Denial of Service vulnerabilityCVE-2023-37788 · GHSA-4R8X-2P26-976PVersion ranges need review. |
github.com/elazarl/goproxyLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator |
GoRed Hat |
High
|
Fix reported |
|
| github.com/ulikunitz/xz fixes readUvarint Denial of Service (DoS)CVE-2021-29482 · GHSA-25XM-HR59-7C27Version ranges need review. |
github.com/ulikunitz/xzMigration Toolkit for Containers/openshift-migration-plugin-container |
GoRed Hat |
High
|
Fix reported |
|
| pgx SQL Injection via Protocol Message Size OverflowCVE-2024-27304 · GHSA-MRWW-27VC-GGHV |
github.com/jackc/pgx/v4github.com/jackc/pgx/v5 |
GoRed Hat |
High
|
Fix reported |
|
| Sensitive headers incorrectly sent after cross-domain redirect in net/httpCVE-2024-45336 · GO-2025-3420 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 |
GoRed Hat |
Medium
|
Fix reported |
|
| Improper input validation in github.com/gin-gonic/ginCVE-2023-26125 · GHSA-3VP4-M3RF-835H |
github.com/gin-gonic/ginMigration Toolkit for Applications 6/mta/mta-admin-addon-rhel8 |
GoRed Hat |
Medium
|
Fix reported |
|
| mellium.im/sasl authentication failure due to insufficient nonce randomnessCVE-2022-48195 · GHSA-GVFJ-FXX3-J323Version ranges need review. |
mellium.im/saslRed Hat Quay 3/quay/quay-operator-rhel8 |
GoRed Hat |
Critical
|
Fix reported |
|
| HashiCorp go-getter unsafe downloads could lead to asymmetric resource exhaustionCVE-2022-30323 · GHSA-28R2-Q6M8-9HPX |
github.com/hashicorp/go-getter/gcs/v2github.com/hashicorp/go-getter/s3/v2 |
GoRed Hat |
High
|
Fix reported |
|
