All products

Logging Subsystem for Red Hat OpenShift/openshift-logging/loki-operator-bundle

Red Hat · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
github.com/buger/jsonparser has a denial of service vulnerabilityCVE-2026-32285 · GHSA-6G7G-W4F8-9C9XVersion ranges need review. github.com/buger/jsonparserLogging Subsystem for Red Hat OpenShift/openshift-logging/logging-loki-rhel9 GoRed Hat High Fix reported
containerd CRI server: Host memory exhaustion through Attach goroutine leakCVE-2025-64329 · GHSA-M6HQ-P25P-FFR2Version ranges need review. github.com/containerd/containerd/v2github.com/containerd/containerd GoRed Hat Medium Fix reported
Go JOSE Panics in JWE decryptionCVE-2026-34986 · GHSA-78H2-9FRX-2JM8Version ranges need review. github.com/go-jose/go-jose/v3github.com/go-jose/go-jose/v4 GoRed Hat High Fix reported
gRPC-Go has an authorization bypass via missing leading slash in :pathCVE-2026-33186 · GHSA-P77J-4MVH-X3M3Version ranges need review. google.golang.org/grpcAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Critical Fix reported
chi has an open redirect vulnerability in the RedirectSlashes middlewareCVE-2025-69725 · GHSA-MQQF-5WVP-8FH8Version ranges need review. github.com/go-chi/chi/v2github.com/go-chi/chi/v3 GoRed Hat Medium Fix reported
Logrus is vulnerable to DoS when using Entry.Writer()CVE-2025-65637 · GHSA-4F99-4Q7P-P3GHVersion ranges need review. github.com/sirupsen/logrusConfidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9 GoRed Hat High Fix reported
React Router vulnerable to XSS via Open RedirectsCVE-2026-22029 · GHSA-2W69-QVJG-HVJX @remix-run/routerreact-router npmRed Hat High Fix reported
React Router has unexpected external redirect via untrusted pathsCVE-2025-68470 · GHSA-9JCX-V3WJ-WH4M react-routerCryostat 4/io.cryostat-cryostat npmRed Hat Medium Fix reported