Red Hat OpenShift Virtualization 4/container-native-virtualization/hyperconverged-cluster-webhook-rhel8

Red Hat · Package

18 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
golang.org/x/net/html has a Quadratic Parsing Complexity issueCVE-2025-47911 · GHSA-W4GW-W5JQ-G9JH	golang.org/x/net/html golang.org/x/net	GoRed Hat	Medium	Fix reported	2026-09-10
Logrus is vulnerable to DoS when using Entry.Writer()CVE-2025-65637 · GHSA-4F99-4Q7P-P3GHVersion ranges need review.	github.com/sirupsen/logrus Confidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9	GoRed Hat	High	Fix reported	2026-09-10
Uncontrolled Resource Consumption in promhttpCVE-2022-21698 · GHSA-CG3Q-J54F-5P7PVersion ranges need review.	github.com/prometheus/client_golang Cost Management Metrics Operator/costmanagement-metrics-operator-container	GoRed Hat	High	Fix reported	2026-09-10
Sensitive headers incorrectly sent after cross-domain redirect in net/httpCVE-2024-45336 · GO-2025-3420	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8	GoRed Hat	Medium	Fix reported	2026-02-17
golang.org/x/net/http2 vulnerable to possible excessive memory growthCVE-2022-41717 · GHSA-XRJJ-MJ9H-534MVersion ranges need review.	golang.org/x/net/http2 golang.org/x/net	GoRed Hat	Medium	Fix reported	2026-02-04
golang.org/x/net vulnerable to Uncontrolled Resource ConsumptionCVE-2022-41723 · GHSA-VVPX-J8F3-3W6HVersion ranges need review.	golang.org/x/net stdlib	GoRed Hat	High	Fix reported	2026-02-04
Panic on certain certificates in crypto/tlsCVE-2021-34558 · GO-2021-0243	stdlib OpenShift Pipelines/golang	GoRed Hat	Medium	Fix reported	2024-05-20
Panic in ReverseProxy in net/http/httputilCVE-2021-36221 · GO-2021-0245	stdlib OpenShift Serverless/knative-eventing	GoRed Hat	Medium	Fix reported	2024-05-20
Misdirected I/O in syscallCVE-2021-44717 · GO-2022-0289	stdlib Migration Toolkit for Containers/cpma	GoRed Hat	Medium	Fix reported	2024-05-20
Uncontrolled memory consumption in math/bigCVE-2022-23772 · GO-2021-0317	stdlib Migration Toolkit for Containers/cpma	GoRed Hat	Medium	Fix reported	2024-05-20
Incorrect access control in the go command in cmd/go/internal/modfetchCVE-2022-23773 · GO-2022-0318	toolchain Migration Toolkit for Containers/cpma	GoRed Hat	Medium	Fix reported	2024-05-20
Stack exhaustion when compiling deeply nested expressions in regexpCVE-2022-24921 · GO-2021-0347	stdlib Migration Toolkit for Containers/cpma	GoRed Hat	Medium	Fix reported	2024-05-20
Panic due to large inputs affecting P-256 curves in crypto/ellipticCVE-2022-28327 · GO-2022-0435	stdlib Migration Toolkit for Containers/cpma	GoRed Hat	Medium	Fix reported	2024-05-20
Stack overflow from a large amount of PEM data in encoding/pemCVE-2022-24675 · GO-2022-0433	stdlib Migration Toolkit for Containers/cpma	GoRed Hat	Medium	Fix reported	2024-05-20
Session tickets lack random ticket_age_add in crypto/tlsCVE-2022-30629 · GO-2022-0531	stdlib Migration Toolkit for Containers/cpma	GoRed Hat	Low	Fix reported	2024-05-20
golang.org/x/net/http2 allows uncontrolled memory consumptionCVE-2021-44716 · GHSA-VC3P-29H2-GPCP	golang.org/x/net/http2 golang.org/x/net	GoRed Hat	High	Fix reported	2024-05-20
golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octetCVE-2021-29923	Migration Toolkit for Containers/rhmtc/openshift-migration-must-gather-rhel8 Migration Toolkit for Containers/rhmtc/openshift-migration-registry-rhel8	Red Hat	Medium	No fix reported	Not recorded
container-native-virtualization: privilege escalation via excessive /etc/passwd permissionsCVE-2025-57848	Red Hat OpenShift Virtualization 4/container-native-virtualization/hyperconverged-cluster-operator-rhel9 Red Hat OpenShift Virtualization 4/container-native-virtualization/hyperconverged-cluster-operator	Red Hat	Medium	No fix reported	Not recorded