OpenShift API for Data Protection/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9

Red Hat · Package

6 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
compress zstd: Panic on two-block framesCVE-2026-116591 · GHSA-FPMH-FRQ8-7RJ8	github.com/klauspost/compress/zstd github.com/klauspost/compress	GoRed Hat	High	Fix reported	2026-11-06
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistecCVE-2025-22866 · GO-2025-3447	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8	GoRed Hat	Medium	Fix reported	2026-09-29
Logrus is vulnerable to DoS when using Entry.Writer()CVE-2025-65637 · GHSA-4F99-4Q7P-P3GHVersion ranges need review.	github.com/sirupsen/logrus Confidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9	GoRed Hat	High	Fix reported	2026-09-10
Kubelet vulnerable to bypass of seccomp profile enforcementCVE-2023-2431 · GHSA-XC8M-28VV-4PJCVersion ranges need review.	k8s.io/kubernetes OpenShift API for Data Protection/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9	GoRed Hat	Medium	Fix reported	2026-09-10
OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metricsCVE-2023-45142 · GHSA-RCJV-MGP8-QVMRVersion ranges need review.	go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin	GoRed Hat	High	Fix reported	2026-09-10
Sensitive headers incorrectly sent after cross-domain redirect in net/httpCVE-2024-45336 · GO-2025-3420	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8	GoRed Hat	Medium	Fix reported	2026-02-17