Security
فارسی
All products

Red Hat OpenShift distributed tracing 3/rhosdt/opentelemetry-target-allocator-rhel8

Red Hat · Package
11 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Memory exhaustion in query parameter parsing in net/urlCVE-2025-61726 · GO-2026-4341 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 GoRed Hat High Fix reported
Jinja has a sandbox breakout through malicious filenamesCVE-2024-56201 · GHSA-GMJ6-6F8F-6699Version ranges need review. jinja2OpenShift Lightspeed/openshift-lightspeed-tech-preview/lightspeed-service-api-rhel9 PyPIRed Hat Medium Fix reported
golang.org/x/net/html has a Quadratic Parsing Complexity issueCVE-2025-47911 · GHSA-W4GW-W5JQ-G9JH golang.org/x/net/htmlgolang.org/x/net GoRed Hat Medium Fix reported
golang.org/x/net vulnerable to Cross-site ScriptingCVE-2025-22872 · GHSA-VVGC-356P-C3XWVersion ranges need review. golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 GoRed Hat Medium Fix reported
Memory Exhaustion in Expr Parser with Unrestricted InputCVE-2025-29786 · GHSA-93MQ-9FFX-83M2Version ranges need review. github.com/expr-lang/exprCustom Metric Autoscaler operator for Red Hat Openshift/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel8 GoRed Hat High Fix reported
Non-linear parsing of case-insensitive content in golang.org/x/net/htmlCVE-2024-45338 · GHSA-W32M-9786-JP63 golang.org/x/net/htmlgolang.org/x/net GoRed Hat High Fix reported
Denial of service via malicious preflight requests in github.com/rs/corsCVE-2025-47908 · GHSA-MH55-GQVF-XFWMVersion ranges need review. github.com/rs/corsMulticluster Engine for Kubernetes/multicluster-engine/agent-service-rhel8 GoRed Hat Medium Fix reported
Usage of ExtKeyUsageAny disables policy validation in crypto/x509CVE-2025-22874 · GO-2025-3749 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 GoRed Hat High Fix reported
Incorrect results returned from Rows.Scan in database/sqlCVE-2025-47907 · GO-2025-3849 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 GoRed Hat Medium Fix reported
Infinite parsing loop in golang.org/x/netCVE-2025-58190 · GO-2026-4441 golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 GoRed Hat Medium Fix reported
cert-manager-controller DoS via Specially Crafted DNS ResponseCVE-2026-25518 · GHSA-GX3X-VQ4P-MHHVVersion ranges need review. github.com/cert-manager/cert-managerCryostat 4/cryostat/cryostat-rhel9-operator GoRed Hat Medium Fix reported