Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat OpenShift Virtualization 4/container-native-virtualization/virt-artifacts-server
Red Hat
· Package
12 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
KubeVirt Arbitrary Container File Read
CVE-2025-64433 · GHSA-QW6Q-3PGR-5CWQ
Version ranges need review.
kubevirt.io/kubevirt
Red Hat OpenShift Virtualization 4/container-native-virtualization/kubemacpool-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
golang.org/x/net/html has a Quadratic Parsing Complexity issue
CVE-2025-47911 · GHSA-W4GW-W5JQ-G9JH
golang.org/x/net/html
golang.org/x/net
Go
Red Hat
Medium
Fix reported
2026-09-10
Logrus is vulnerable to DoS when using Entry.Writer()
CVE-2025-65637 · GHSA-4F99-4Q7P-P3GH
Version ranges need review.
github.com/sirupsen/logrus
Confidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9
Go
Red Hat
High
Fix reported
2026-09-10
KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes
CVE-2025-64436 · GHSA-7XGM-5PRM-V5GC
github.com/kubevirt/kubevirt
kubevirt.io/kubevirt
Go
Red Hat
Medium
Fix reported
2026-09-10
golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read
CVE-2025-47914 · GHSA-F6X5-JH6R-WRFV
Version ranges need review.
golang.org/x/crypto
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption
CVE-2025-58181 · GHSA-J5W8-Q4QC-RX2X
Version ranges need review.
golang.org/x/crypto
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer
CVE-2025-64432 · GHSA-38JW-G2QX-4286
Version ranges need review.
kubevirt.io/kubevirt
Red Hat OpenShift Virtualization 4/container-native-virtualization/kubemacpool-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
KubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation
CVE-2025-64435 · GHSA-9M94-W2VQ-HCF9
Version ranges need review.
kubevirt.io/kubevirt
Red Hat OpenShift Virtualization 4/container-native-virtualization/kubemacpool-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
KubeVirt Isolation Detection Flaw Allows Arbitrary File Permission Changes
CVE-2025-64437 · GHSA-2R4R-5X78-MVQF
Version ranges need review.
kubevirt.io/kubevirt
Red Hat OpenShift Virtualization 4/container-native-virtualization/kubemacpool-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
runc vulnerable to container breakout through process.cwd trickery and leaked fds
CVE-2024-21626 · GHSA-XR7R-F8XQ-VFVV
Version ranges need review.
github.com/opencontainers/runc
OpenShift Developer Tools and Services/ocp-tools-4/jenkins-agent-base-rhel8
Go
Red Hat
High
Fix reported
2026-09-10
Stack exhaustion when compiling deeply nested expressions in regexp
CVE-2022-24921 · GO-2021-0347
stdlib
Migration Toolkit for Containers/cpma
Go
Red Hat
Medium
Fix reported
2024-05-20
istio: Istio: Firewall rule injection via annotation allows limited integrity impact
CVE-2026-23766
ExternalDNS Operator/edo/external-dns-rhel8
ExternalDNS Operator/edo/external-dns-rhel9
Red Hat
Unknown
No fix reported
Not recorded
