OpenShift API for Data Protection/oadp/oadp-kubevirt-velero-plugin-rhel8

Red Hat · Package

6 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistecCVE-2025-22866 · GO-2025-3447	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8	GoRed Hat	Medium	Fix reported	2026-09-29
Logrus is vulnerable to DoS when using Entry.Writer()CVE-2025-65637 · GHSA-4F99-4Q7P-P3GHVersion ranges need review.	github.com/sirupsen/logrus Confidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9	GoRed Hat	High	Fix reported	2026-09-10
go-retryablehttp can leak basic auth credentials to log filesCVE-2024-6104 · GHSA-V6V8-XJ6M-XWQHVersion ranges need review.	github.com/hashicorp/go-retryablehttp OpenShift API for Data Protection/oadp/oadp-kubevirt-velero-plugin-rhel8	GoRed Hat	Medium	Fix reported	2026-09-10
OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metricsCVE-2023-45142 · GHSA-RCJV-MGP8-QVMRVersion ranges need review.	go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin	GoRed Hat	High	Fix reported	2026-09-10
Excessive resource consumption when printing error string for host certificate validation in crypto/x509CVE-2025-61729 · GO-2025-4155	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	GoRed Hat	High	Fix reported	2026-08-14
Sensitive headers incorrectly sent after cross-domain redirect in net/httpCVE-2024-45336 · GO-2025-3420	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8	GoRed Hat	Medium	Fix reported	2026-02-17