Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Edge Manager preview/rhem/flightctl-alertmanager-proxy-rhel9
Red Hat
· Package
9 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Lodash has Prototype Pollution Vulnerability in `_.unset`, `_.omit`, and `_.pullAt` functions
CVE-2025-13465 · GHSA-XXJR-MMJV-4GPG
lodash-amd
lodash-es
npm
Red Hat
Medium
Fix reported
2026-11-04
kube-controller-manager is vulnerable to half-blind Server Side Request Forgery through in-tree Portworx StorageClass
CVE-2025-13281 · GHSA-R6J8-C6R2-37RR
Version ranges need review.
k8s.io/kubernetes
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-shared-resource-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
js-yaml has prototype pollution in merge (<<)
CVE-2025-64718 · GHSA-MH29-5H37-FV8M
js-yaml
Cryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9
npm
Red Hat
Medium
Fix reported
2026-09-10
golang.org/x/crypto/ssh/agent has a potential denial of service
CVE-2025-47913 · GHSA-56W8-48FP-6MGV
golang.org/x/crypto/ssh/agent
golang.org/x/crypto
Go
Red Hat
High
Fix reported
2026-09-10
golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read
CVE-2025-47914 · GHSA-F6X5-JH6R-WRFV
Version ranges need review.
golang.org/x/crypto
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption
CVE-2025-58181 · GHSA-J5W8-Q4QC-RX2X
Version ranges need review.
golang.org/x/crypto
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
Excessive resource consumption when printing error string for host certificate validation in crypto/x509
CVE-2025-61729 · GO-2025-4155
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
Go
Red Hat
High
Fix reported
2026-08-14
React Router vulnerable to XSS via Open Redirects
CVE-2026-22029 · GHSA-2W69-QVJG-HVJX
@remix-run/router
react-router
npm
Red Hat
High
Fix reported
2026-02-03
React Router has unexpected external redirect via untrusted paths
CVE-2025-68470 · GHSA-9JCX-V3WJ-WH4M
react-router
Cryostat 4/io.cryostat-cryostat
npm
Red Hat
Medium
Fix reported
2026-02-03
