Security
فارسی
All products

Red Hat OpenShift Virtualization 4/container-native-virtualization/hyperconverged-cluster-operator

Red Hat · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
golang.org/x/net/html has a Quadratic Parsing Complexity issueCVE-2025-47911 · GHSA-W4GW-W5JQ-G9JH golang.org/x/net/htmlgolang.org/x/net GoRed Hat Medium Fix reported
Logrus is vulnerable to DoS when using Entry.Writer()CVE-2025-65637 · GHSA-4F99-4Q7P-P3GHVersion ranges need review. github.com/sirupsen/logrusConfidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9 GoRed Hat High Fix reported
Panic on certain certificates in crypto/tlsCVE-2021-34558 · GO-2021-0243 stdlibOpenShift Pipelines/golang GoRed Hat Medium Fix reported
Panic in ReverseProxy in net/http/httputilCVE-2021-36221 · GO-2021-0245 stdlibOpenShift Serverless/knative-eventing GoRed Hat Medium Fix reported
Misdirected I/O in syscallCVE-2021-44717 · GO-2022-0289 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Incorrect access control in the go command in cmd/go/internal/modfetchCVE-2022-23773 · GO-2022-0318 toolchainMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Stack exhaustion when compiling deeply nested expressions in regexpCVE-2022-24921 · GO-2021-0347 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
golang.org/x/net/http2 allows uncontrolled memory consumptionCVE-2021-44716 · GHSA-VC3P-29H2-GPCP golang.org/x/net/http2golang.org/x/net GoRed Hat High Fix reported
golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octetCVE-2021-29923 Migration Toolkit for Containers/rhmtc/openshift-migration-must-gather-rhel8Migration Toolkit for Containers/rhmtc/openshift-migration-registry-rhel8 Red Hat Medium No fix reported
container-native-virtualization: privilege escalation via excessive /etc/passwd permissionsCVE-2025-57848 Red Hat OpenShift Virtualization 4/container-native-virtualization/hyperconverged-cluster-operator-rhel9Red Hat OpenShift Virtualization 4/container-native-virtualization/hyperconverged-cluster-operator Red Hat Medium No fix reported