Security
فارسی
All products

Red Hat Advanced Cluster Security 4/advanced-cluster-security/rhacs-scanner-db-slim-rhel8

Red Hat · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
rardecode: DoS risk due to unrestricted RAR dictionary sizesCVE-2025-11579 · GHSA-RWVP-R38J-9RGGVersion ranges need review. github.com/nwaples/rardecode/v2github.com/nwaples/rardecode GoRed Hat Medium Fix reported
golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds readCVE-2025-47914 · GHSA-F6X5-JH6R-WRFVVersion ranges need review. golang.org/x/cryptoAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9 GoRed Hat Medium Fix reported
golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumptionCVE-2025-58181 · GHSA-J5W8-Q4QC-RX2XVersion ranges need review. golang.org/x/cryptoBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9 GoRed Hat Medium Fix reported
github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archivesCVE-2025-58058 · GHSA-JC7W-C686-C4V9Version ranges need review. github.com/ulikunitz/xzAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9 GoRed Hat Medium Fix reported
CIRCL-Fourq: Missing and wrong validation can lead to incorrect resultsCVE-2025-8556 · GHSA-2X5J-VHC8-9CWMVersion ranges need review. github.com/cloudflare/circlBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9 GoRed Hat Low Fix reported
golang.org/x/net vulnerable to Cross-site ScriptingCVE-2025-22872 · GHSA-VVGC-356P-C3XWVersion ranges need review. golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 GoRed Hat Medium Fix reported
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/netCVE-2025-22870 · GHSA-QXP5-GWG8-XV66Version ranges need review. golang.org/x/netstdlib GoRed Hat Medium Fix reported
stackrox: XSS in StackroxCVE-2025-5198 Red Hat Advanced Cluster Security 4/advanced-cluster-security/rhacs-central-db-rhel8Red Hat Advanced Cluster Security 4/advanced-cluster-security/rhacs-main-rhel8 Red Hat Medium No fix reported
istio: Istio: Firewall rule injection via annotation allows limited integrity impactCVE-2026-23766 ExternalDNS Operator/edo/external-dns-rhel8ExternalDNS Operator/edo/external-dns-rhel9 Red Hat Unknown No fix reported
ply: python-ply: Unsafe pickle file handling in PlyCVE-2025-56005 Migration Toolkit for Containers/rhmtc/openshift-migration-rhel8-operatorMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-must-gather-rhel8 Red Hat High No fix reported