Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat OpenShift distributed tracing 3/rhosdt/opentelemetry-collector-rhel8
Red Hat
· Package
10 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Memory exhaustion in query parameter parsing in net/url
CVE-2025-61726 · GO-2026-4341
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
Go
Red Hat
High
Fix reported
2026-10-03
Jinja has a sandbox breakout through malicious filenames
CVE-2024-56201 · GHSA-GMJ6-6F8F-6699
Version ranges need review.
jinja2
OpenShift Lightspeed/openshift-lightspeed-tech-preview/lightspeed-service-api-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-09-10
golang.org/x/net/html has a Quadratic Parsing Complexity issue
CVE-2025-47911 · GHSA-W4GW-W5JQ-G9JH
golang.org/x/net/html
golang.org/x/net
Go
Red Hat
Medium
Fix reported
2026-09-10
go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data
CVE-2025-11065 · GHSA-2464-8J7C-4CJM
Version ranges need review.
github.com/go-viper/mapstructure/v2
github.com/go-viper/mapstructure
Go
Red Hat
Medium
Fix reported
2026-09-10
golang.org/x/net vulnerable to Cross-site Scripting
CVE-2025-22872 · GHSA-VVGC-356P-C3XW
Version ranges need review.
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8
Go
Red Hat
Medium
Fix reported
2026-09-10
Denial of service via malicious preflight requests in github.com/rs/cors
CVE-2025-47908 · GHSA-MH55-GQVF-XFWM
Version ranges need review.
github.com/rs/cors
Multicluster Engine for Kubernetes/multicluster-engine/agent-service-rhel8
Go
Red Hat
Medium
Fix reported
2026-09-10
go-retryablehttp can leak basic auth credentials to log files
CVE-2024-6104 · GHSA-V6V8-XJ6M-XWQH
Version ranges need review.
github.com/hashicorp/go-retryablehttp
OpenShift API for Data Protection/oadp/oadp-kubevirt-velero-plugin-rhel8
Go
Red Hat
Medium
Fix reported
2026-09-10
Usage of ExtKeyUsageAny disables policy validation in crypto/x509
CVE-2025-22874 · GO-2025-3749
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
Go
Red Hat
High
Fix reported
2026-08-27
Incorrect results returned from Rows.Scan in database/sql
CVE-2025-47907 · GO-2025-3849
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
Go
Red Hat
Medium
Fix reported
2026-05-30
Infinite parsing loop in golang.org/x/net
CVE-2025-58190 · GO-2026-4441
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
Go
Red Hat
Medium
Fix reported
2026-05-15
