Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat 3scale API Management Platform 2/3scale-amp26/operator
Red Hat
· Package
18 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Incorrect parsing of IPv6 host literals in net/url
CVE-2026-25679 · GO-2026-4601
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
High
Fix reported
2026-10-16
Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509
CVE-2026-33810 · GO-2026-4866
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
High
Fix reported
2026-10-14
Incorrect enforcement of email constraints in crypto/x509
CVE-2026-27137 · GO-2026-4599
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
High
Fix reported
2026-10-07
Memory exhaustion in query parameter parsing in net/url
CVE-2025-61726 · GO-2026-4341
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
Go
Red Hat
High
Fix reported
2026-10-03
Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls
CVE-2026-32283 · GO-2026-4870
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
High
Fix reported
2026-10-03
Unexpected work during chain building in crypto/x509
CVE-2026-32280 · GO-2026-4947
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
High
Fix reported
2026-10-03
Unexpected session resumption in crypto/tls
CVE-2025-68121 · GO-2026-4337
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-29
golang.org/x/net/html has a Quadratic Parsing Complexity issue
CVE-2025-47911 · GHSA-W4GW-W5JQ-G9JH
golang.org/x/net/html
golang.org/x/net
Go
Red Hat
Medium
Fix reported
2026-09-10
filippo.io/edwards25519 MultiScalarMult produces invalid results or undefined behavior if receiver is not the identity
CVE-2026-26958 · GHSA-FW7P-63QQ-7HPR
Version ranges need review.
filippo.io/edwards25519
Cryostat 4/cryostat/cryostat-storage-rhel9
Go
Red Hat
Low
Fix reported
2026-09-10
Logrus is vulnerable to DoS when using Entry.Writer()
CVE-2025-65637 · GHSA-4F99-4Q7P-P3GH
Version ranges need review.
github.com/sirupsen/logrus
Confidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9
Go
Red Hat
High
Fix reported
2026-09-10
Excessive resource consumption when printing error string for host certificate validation in crypto/x509
CVE-2025-61729 · GO-2025-4155
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
Go
Red Hat
High
Fix reported
2026-08-14
Handshake messages may be processed at the incorrect encryption level in crypto/tls
CVE-2025-61730 · GO-2026-4340
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-08-07
Quadratic complexity when parsing some invalid inputs in encoding/pem
CVE-2025-61723 · GO-2025-4009
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-05-15
CrossOriginProtection insecure bypass patterns not limited to exact matches in net/http
CVE-2025-47910 · GO-2025-3955
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-05-15
ALPN negotiation error contains attacker controlled information in crypto/tls
CVE-2025-58189 · GO-2025-4008
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-05-15
Lack of limit when parsing cookies can cause memory exhaustion in net/http
CVE-2025-58186 · GO-2025-4012
stdlib
Cryostat 4/cryostat/cryostat-grafana-dashboard-rhel9
Go
Red Hat
Low
Fix reported
2026-05-15
Parsing DER payload can cause memory exhaustion in encoding/asn1
CVE-2025-58185 · GO-2025-4011
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-05-15
Improper access to parent directory of root in os
CVE-2025-22873 · GO-2026-4403
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-05-15
