Security
فارسی
All products

Multicluster Engine for Kubernetes/multicluster-engine/agent-service-rhel8

Red Hat · Package
15 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistecCVE-2025-22866 · GO-2025-3447 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 GoRed Hat Medium Fix reported
github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archivesCVE-2025-58058 · GHSA-JC7W-C686-C4V9Version ranges need review. github.com/ulikunitz/xzAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9 GoRed Hat Medium Fix reported
Moby firewalld reload makes published container ports accessible from remote hosts CVE-2025-54388 · GHSA-X4RX-4GW3-53P4Version ranges need review. github.com/docker/dockerMulticluster Engine for Kubernetes/multicluster-engine/agent-service-rhel8 GoRed Hat Medium Fix reported
Moby firewalld reload removes bridge network isolationCVE-2025-54410 · GHSA-4VQ8-7JFC-9CVPVersion ranges need review. github.com/docker/dockerMulticluster Engine for Kubernetes/multicluster-engine/agent-service-rhel8 GoRed Hat Low Fix reported
golang.org/x/net vulnerable to Cross-site ScriptingCVE-2025-22872 · GHSA-VVGC-356P-C3XWVersion ranges need review. golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 GoRed Hat Medium Fix reported
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/netCVE-2025-22870 · GHSA-QXP5-GWG8-XV66Version ranges need review. golang.org/x/netstdlib GoRed Hat Medium Fix reported
golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key ExchangeCVE-2025-22869 · GHSA-HCG3-Q754-CR77Version ranges need review. golang.org/x/cryptoAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-reporter-rhel8 GoRed Hat High Fix reported
NULL Pointer Dereference on moby image historyCVE-2024-36620 · GHSA-Q59J-VV4J-V33CVersion ranges need review. github.com/moby/mobyMulticluster Engine for Kubernetes/multicluster-engine-assisted-service-8-container GoRed Hat Medium Fix reported
Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situationsCVE-2024-51744 · GHSA-29WX-VH33-7X7RVersion ranges need review. github.com/golang-jwt/jwt/v4Builds for Red Hat OpenShift/openshift-builds-triggers-container GoRed Hat Low Fix reported
Denial of service via malicious preflight requests in github.com/rs/corsCVE-2025-47908 · GHSA-MH55-GQVF-XFWMVersion ranges need review. github.com/rs/corsMulticluster Engine for Kubernetes/multicluster-engine/agent-service-rhel8 GoRed Hat Medium Fix reported
pgx SQL Injection via Line Comment CreationCVE-2024-27289 · GHSA-M7WR-2XF7-CM9PVersion ranges need review. github.com/jackc/pgx/v4github.com/jackc/pgx GoRed Hat High Fix reported
otelgrpc DoS vulnerability due to unbound cardinality metrics CVE-2023-47108 · GHSA-8PGV-569H-W5RWVersion ranges need review. go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpcLogical Volume Manager Storage/lvms4/lvms-rhel9-operator GoRed Hat High Fix reported
Bare Metal Operator (BMO) can expose any secret from other namespaces via BMCEventSubscription CRDCVE-2025-29781 · GHSA-C98H-7HP9-V9HQVersion ranges need review. github.com/metal3-io/baremetal-operator/apisAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-reporter-rhel8 GoRed Hat Medium Fix reported
Sensitive headers incorrectly sent after cross-domain redirect in net/httpCVE-2024-45336 · GO-2025-3420 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 GoRed Hat Medium Fix reported
mce: privilege escalation via excessive /etc/passwd permissionsCVE-2025-57851 Multicluster Engine for Kubernetes/multicluster-engine/agent-service-rhel8Multicluster Engine for Kubernetes/multicluster-engine/assisted-service-8-rhel8 Red Hat Medium No fix reported