All products

Multicluster Engine for Kubernetes/multicluster-engine/hypershift-addon-rhel8-operator

Red Hat · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Unbounded allocation when parsing GNU sparse map in archive/tarCVE-2025-58183 · GO-2025-4014 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium Fix reported
golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds readCVE-2025-47914 · GHSA-F6X5-JH6R-WRFVVersion ranges need review. golang.org/x/cryptoAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9 GoRed Hat Medium Fix reported
golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumptionCVE-2025-58181 · GHSA-J5W8-Q4QC-RX2XVersion ranges need review. golang.org/x/cryptoBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9 GoRed Hat Medium Fix reported
Excessive resource consumption when printing error string for host certificate validation in crypto/x509CVE-2025-61729 · GO-2025-4155 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 GoRed Hat High Fix reported
operator-sdk: privilege escalation due to incorrect permissions of /etc/passwdCVE-2025-7195 · GHSA-856V-8QM2-9WJVVersion ranges need review. github.com/operator-framework/operator-sdkMulticluster Engine for Kubernetes/multicluster-engine/addon-manager-rhel8 GoRed Hat Medium Fix reported
Helm vulnerable to Code Injection through malicious chart.yaml contentCVE-2025-53547 · GHSA-557J-XG8C-Q2MMVersion ranges need review. helm.sh/helm/v3Deployment Validation Operator/dvo/deployment-validation-operator-bundle GoRed Hat High Fix reported
Helm Charts with Specific JSON Schema Values Can Cause Memory ExhaustionCVE-2025-55199 · GHSA-9H84-QMV7-982PVersion ranges need review. helm.sh/helm/v3helm.sh/helm GoRed Hat Medium Fix reported
Helm May Panic Due To Incorrect YAML ContentCVE-2025-55198 · GHSA-F9F8-9PMF-XV68Version ranges need review. helm.sh/helm/v3helm.sh/helm GoRed Hat Medium Fix reported