All products

Red Hat Ceph Storage 8/rhel9/grafana

Red Hat · Package
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Sensitive headers not cleared on cross-origin redirect in net/httpCVE-2025-4673 · GO-2025-3751 stdlibCryostat 4/cryostat/cryostat-storage-rhel9 GoRed Hat Medium Fix reported
Unbounded allocation when parsing GNU sparse map in archive/tarCVE-2025-58183 · GO-2025-4014 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium Fix reported
golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds readCVE-2025-47914 · GHSA-F6X5-JH6R-WRFVVersion ranges need review. golang.org/x/cryptoAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9 GoRed Hat Medium Fix reported
golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumptionCVE-2025-58181 · GHSA-J5W8-Q4QC-RX2XVersion ranges need review. golang.org/x/cryptoBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9 GoRed Hat Medium Fix reported
Moby firewalld reload makes published container ports accessible from remote hosts CVE-2025-54388 · GHSA-X4RX-4GW3-53P4Version ranges need review. github.com/docker/dockerMulticluster Engine for Kubernetes/multicluster-engine/agent-service-rhel8 GoRed Hat Medium Fix reported
Moby firewalld reload removes bridge network isolationCVE-2025-54410 · GHSA-4VQ8-7JFC-9CVPVersion ranges need review. github.com/docker/dockerMulticluster Engine for Kubernetes/multicluster-engine/agent-service-rhel8 GoRed Hat Low Fix reported
CIRCL-Fourq: Missing and wrong validation can lead to incorrect resultsCVE-2025-8556 · GHSA-2X5J-VHC8-9CWMVersion ranges need review. github.com/cloudflare/circlBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9 GoRed Hat Low Fix reported
go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishmentCVE-2025-29923 · GHSA-92CP-5422-2MW7Version ranges need review. github.com/redis/go-redis/v7github.com/redis/go-redis/v8 GoRed Hat Low Fix reported
Denial of service via malicious preflight requests in github.com/rs/corsCVE-2025-47908 · GHSA-MH55-GQVF-XFWMVersion ranges need review. github.com/rs/corsMulticluster Engine for Kubernetes/multicluster-engine/agent-service-rhel8 GoRed Hat Medium Fix reported
Excessive resource consumption when printing error string for host certificate validation in crypto/x509CVE-2025-61729 · GO-2025-4155 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 GoRed Hat High Fix reported
Incorrect results returned from Rows.Scan in database/sqlCVE-2025-47907 · GO-2025-3849 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 GoRed Hat Medium Fix reported
grafana/grafana/pkg/services/dashboards: Grafana Dashboard Permissions Scope Bypass Enables Cross‑Dashboard Privilege EscalationCVE-2026-21721 Multicluster Global Hub/multicluster-globalhub/multicluster-globalhub-grafana-rhel9Red Hat Ceph Storage 5/rhceph/grafana-rhel9 Red Hat High No fix reported