Red Hat OpenShift Container Platform 4/openshift4/openshift-route-controller-manager-rhel8

Red Hat · Package

5 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/netCVE-2026-33814 · GO-2026-4918	golang.org/x/net stdlib	GoRed Hat	High	Fix reported	2026-10-16
Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSONCVE-2024-24786 · GHSA-8R3F-844C-MC37Version ranges need review.	google.golang.org/protobuf/encoding/protojson google.golang.org/protobuf/internal/encoding/json	GoRed Hat	Medium	Fix reported	2026-10-14
Node Denial of Service via kubelet Checkpoint APICVE-2025-0426 · GHSA-JGFP-53C3-624WVersion ranges need review.	k8s.io/kubernetes Builds for Red Hat OpenShift/openshift-builds/openshift-builds-shared-resource-rhel9	GoRed Hat	Medium	Fix reported	2026-09-10
otelgrpc DoS vulnerability due to unbound cardinality metrics CVE-2023-47108 · GHSA-8PGV-569H-W5RWVersion ranges need review.	go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc Logical Volume Manager Storage/lvms4/lvms-rhel9-operator	GoRed Hat	High	Fix reported	2026-09-10
OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metricsCVE-2023-45142 · GHSA-RCJV-MGP8-QVMRVersion ranges need review.	go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin	GoRed Hat	High	Fix reported	2026-09-10