Red Hat OpenShift Container Platform 4/openshift4/ose-console-rhel9-operator

Red Hat · Package

11 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistecCVE-2025-22866 · GO-2025-3447	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8	GoRed Hat	Medium	Fix reported	2026-09-29
gRPC-Go has an authorization bypass via missing leading slash in :pathCVE-2026-33186 · GHSA-P77J-4MVH-X3M3Version ranges need review.	google.golang.org/grpc Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9	GoRed Hat	Critical	Fix reported	2026-09-10
Logrus is vulnerable to DoS when using Entry.Writer()CVE-2025-65637 · GHSA-4F99-4Q7P-P3GHVersion ranges need review.	github.com/sirupsen/logrus Confidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9	GoRed Hat	High	Fix reported	2026-09-10
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/netCVE-2025-22870 · GHSA-QXP5-GWG8-XV66Version ranges need review.	golang.org/x/net stdlib	GoRed Hat	Medium	Fix reported	2026-09-10
otelgrpc DoS vulnerability due to unbound cardinality metrics CVE-2023-47108 · GHSA-8PGV-569H-W5RWVersion ranges need review.	go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc Logical Volume Manager Storage/lvms4/lvms-rhel9-operator	GoRed Hat	High	Fix reported	2026-09-10
OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metricsCVE-2023-45142 · GHSA-RCJV-MGP8-QVMRVersion ranges need review.	go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin	GoRed Hat	High	Fix reported	2026-09-10
golang.org/x/text Infinite loopCVE-2020-14040 · GHSA-5RCV-M4M3-HFH7Version ranges need review.	golang.org/x/text OpenShift Developer Tools and Services/jenkins-operator-container	GoRed Hat	Medium	Fix reported	2026-09-10
goproxy Denial of Service vulnerabilityCVE-2023-37788 · GHSA-4R8X-2P26-976PVersion ranges need review.	github.com/elazarl/goproxy Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator	GoRed Hat	High	Fix reported	2026-08-07
golang.org/x/net vulnerable to Uncontrolled Resource ConsumptionCVE-2022-41723 · GHSA-VVPX-J8F3-3W6HVersion ranges need review.	golang.org/x/net stdlib	GoRed Hat	High	Fix reported	2026-02-04
go.mongodb.org/mongo-driver improperly validates cstrings when marshalling Go objects into BSONCVE-2021-20329 · GHSA-F6MQ-5M25-4R72Version ranges need review.	go.mongodb.org/mongo-driver Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9	GoRed Hat	Medium	Fix reported	2024-09-17
consul: Command injection through script checks optionCVE-2023-5332	Custom Metric Autoscaler operator for Red Hat Openshift/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel8 OpenShift Service Mesh 2/consul	Red Hat	High	No fix reported	Not recorded