Security
فارسی
All products

Red Hat OpenShift distributed tracing 3/rhosdt/tempo-rhel8-operator

Red Hat · Package
14 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Memory exhaustion in query parameter parsing in net/urlCVE-2025-61726 · GO-2026-4341 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 GoRed Hat High Fix reported
Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` queryCVE-2025-31125 · GHSA-4R4M-QW57-CHR8 viteRed Hat OpenShift distributed tracing 3/rhosdt/tempo-gateway-opa-rhel8 npmRed Hat Medium Fix reported
Vite has an `server.fs.deny` bypass with an invalid `request-target`CVE-2025-32395 · GHSA-356W-63V5-8WF4 viteRed Hat Ansible Automation Platform 2/automation-controller npmRed Hat Medium Fix reported
golang.org/x/net vulnerable to Cross-site ScriptingCVE-2025-22872 · GHSA-VVGC-356P-C3XWVersion ranges need review. golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 GoRed Hat Medium Fix reported
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/netCVE-2025-22870 · GHSA-QXP5-GWG8-XV66Version ranges need review. golang.org/x/netstdlib GoRed Hat Medium Fix reported
http-proxy-middleware allows fixRequestBody to proceed even if bodyParser has failedCVE-2025-32997 · GHSA-9GQV-WP59-FQ42 http-proxy-middlewareCryostat 3/io.cryostat-cryostat3 npmRed Hat Medium Fix reported
http-proxy-middleware can call writeBody twice because "else if" is not usedCVE-2025-32996 · GHSA-4WWW-5P9H-95MH http-proxy-middlewareCryostat 3/io.cryostat-cryostat3 npmRed Hat Medium Fix reported
Vite bypasses server.fs.deny when using ?raw??CVE-2025-30208 · GHSA-X574-M823-4X7W viteRed Hat Ansible Automation Platform 2/automation-controller npmRed Hat Medium Fix reported
Memory Exhaustion in Expr Parser with Unrestricted InputCVE-2025-29786 · GHSA-93MQ-9FFX-83M2Version ranges need review. github.com/expr-lang/exprCustom Metric Autoscaler operator for Red Hat Openshift/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel8 GoRed Hat High Fix reported
Vite allows server.fs.deny to be bypassed with .svg or relative pathsCVE-2025-31486 · GHSA-XCJ6-PQ6G-QJ4X viteRed Hat Ansible Automation Platform 2/automation-controller npmRed Hat Medium Fix reported
Cilium node based network policies may incorrectly allow workload trafficCVE-2025-30163 · GHSA-C6PF-2V8J-96MCVersion ranges need review. github.com/cilium/ciliumNetwork Observability Operator/network-observability/network-observability-ebpf-agent-rhel9 GoRed Hat Low Fix reported
Incorrect results returned from Rows.Scan in database/sqlCVE-2025-47907 · GO-2025-3849 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 GoRed Hat Medium Fix reported
Cilium East-west traffic not subject to egress policy enforcement for requests via Gateway API load balancersCVE-2025-30162 · GHSA-24QP-4XX8-3JVJVersion ranges need review. github.com/cilium/ciliumNetwork Observability Operator/network-observability/network-observability-ebpf-agent-rhel9 GoRed Hat Low Fix reported
Harden-Runner allows evasion of 'disable-sudo' policyCVE-2025-32955 · GHSA-MXR3-8WHJ-J74R step-security/harden-runnerRed Hat Enterprise Linux AI (RHEL AI)/rhelai1/pathservice-rhel9 GitHub ActionsRed Hat Medium Fix reported