All products

Red Hat OpenShift Virtualization 4/container-native-virtualization/mtq-operator-rhel9

Red Hat · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
KubeVirt Arbitrary Container File Read CVE-2025-64433 · GHSA-QW6Q-3PGR-5CWQVersion ranges need review. kubevirt.io/kubevirtRed Hat OpenShift Virtualization 4/container-native-virtualization/kubemacpool-rhel9 GoRed Hat Medium Fix reported
KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between NodesCVE-2025-64436 · GHSA-7XGM-5PRM-V5GC github.com/kubevirt/kubevirtkubevirt.io/kubevirt GoRed Hat Medium Fix reported
KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer CVE-2025-64432 · GHSA-38JW-G2QX-4286Version ranges need review. kubevirt.io/kubevirtRed Hat OpenShift Virtualization 4/container-native-virtualization/kubemacpool-rhel9 GoRed Hat Medium Fix reported
KubeVirt VMI Denial-of-Service (DoS) Using Pod ImpersonationCVE-2025-64435 · GHSA-9M94-W2VQ-HCF9Version ranges need review. kubevirt.io/kubevirtRed Hat OpenShift Virtualization 4/container-native-virtualization/kubemacpool-rhel9 GoRed Hat Medium Fix reported
KubeVirt Isolation Detection Flaw Allows Arbitrary File Permission ChangesCVE-2025-64437 · GHSA-2R4R-5X78-MVQFVersion ranges need review. kubevirt.io/kubevirtRed Hat OpenShift Virtualization 4/container-native-virtualization/kubemacpool-rhel9 GoRed Hat Medium Fix reported
golang.org/x/net vulnerable to Cross-site ScriptingCVE-2025-22872 · GHSA-VVGC-356P-C3XWVersion ranges need review. golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 GoRed Hat Medium Fix reported
Node Denial of Service via kubelet Checkpoint APICVE-2025-0426 · GHSA-JGFP-53C3-624WVersion ranges need review. k8s.io/kubernetesBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-shared-resource-rhel9 GoRed Hat Medium Fix reported
istio: Istio: Firewall rule injection via annotation allows limited integrity impactCVE-2026-23766 ExternalDNS Operator/edo/external-dns-rhel8ExternalDNS Operator/edo/external-dns-rhel9 Red Hat Unknown No fix reported