Red Hat OpenShift Virtualization 4/container-native-virtualization/virt-exportproxy

Red Hat · Package

12 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
KubeVirt Arbitrary Container File Read CVE-2025-64433 · GHSA-QW6Q-3PGR-5CWQVersion ranges need review.	kubevirt.io/kubevirt Red Hat OpenShift Virtualization 4/container-native-virtualization/kubemacpool-rhel9	GoRed Hat	Medium	Fix reported	2026-09-10
Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/cryptoCVE-2024-45337 · GHSA-V778-237X-GJRCVersion ranges need review.	golang.org/x/crypto Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel8	GoRed Hat	Critical	Fix reported	2026-09-10
golang.org/x/net/html has a Quadratic Parsing Complexity issueCVE-2025-47911 · GHSA-W4GW-W5JQ-G9JH	golang.org/x/net/html golang.org/x/net	GoRed Hat	Medium	Fix reported	2026-09-10
Logrus is vulnerable to DoS when using Entry.Writer()CVE-2025-65637 · GHSA-4F99-4Q7P-P3GHVersion ranges need review.	github.com/sirupsen/logrus Confidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9	GoRed Hat	High	Fix reported	2026-09-10
KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between NodesCVE-2025-64436 · GHSA-7XGM-5PRM-V5GC	github.com/kubevirt/kubevirt kubevirt.io/kubevirt	GoRed Hat	Medium	Fix reported	2026-09-10
golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds readCVE-2025-47914 · GHSA-F6X5-JH6R-WRFVVersion ranges need review.	golang.org/x/crypto Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9	GoRed Hat	Medium	Fix reported	2026-09-10
golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumptionCVE-2025-58181 · GHSA-J5W8-Q4QC-RX2XVersion ranges need review.	golang.org/x/crypto Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9	GoRed Hat	Medium	Fix reported	2026-09-10
KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer CVE-2025-64432 · GHSA-38JW-G2QX-4286Version ranges need review.	kubevirt.io/kubevirt Red Hat OpenShift Virtualization 4/container-native-virtualization/kubemacpool-rhel9	GoRed Hat	Medium	Fix reported	2026-09-10
KubeVirt VMI Denial-of-Service (DoS) Using Pod ImpersonationCVE-2025-64435 · GHSA-9M94-W2VQ-HCF9Version ranges need review.	kubevirt.io/kubevirt Red Hat OpenShift Virtualization 4/container-native-virtualization/kubemacpool-rhel9	GoRed Hat	Medium	Fix reported	2026-09-10
KubeVirt Isolation Detection Flaw Allows Arbitrary File Permission ChangesCVE-2025-64437 · GHSA-2R4R-5X78-MVQFVersion ranges need review.	kubevirt.io/kubevirt Red Hat OpenShift Virtualization 4/container-native-virtualization/kubemacpool-rhel9	GoRed Hat	Medium	Fix reported	2026-09-10
runc vulnerable to container breakout through process.cwd trickery and leaked fdsCVE-2024-21626 · GHSA-XR7R-F8XQ-VFVVVersion ranges need review.	github.com/opencontainers/runc OpenShift Developer Tools and Services/ocp-tools-4/jenkins-agent-base-rhel8	GoRed Hat	High	Fix reported	2026-09-10
istio: Istio: Firewall rule injection via annotation allows limited integrity impactCVE-2026-23766	ExternalDNS Operator/edo/external-dns-rhel8 ExternalDNS Operator/edo/external-dns-rhel9	Red Hat	Unknown	No fix reported	Not recorded