All products

Multicluster Engine for Kubernetes/multicluster-engine/work-rhel8

Red Hat · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Unbounded allocation when parsing GNU sparse map in archive/tarCVE-2025-58183 · GO-2025-4014 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium Fix reported
Excessive resource consumption when printing error string for host certificate validation in crypto/x509CVE-2025-61729 · GO-2025-4155 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 GoRed Hat High Fix reported
operator-sdk: privilege escalation due to incorrect permissions of /etc/passwdCVE-2025-7195 · GHSA-856V-8QM2-9WJVVersion ranges need review. github.com/operator-framework/operator-sdkMulticluster Engine for Kubernetes/multicluster-engine/addon-manager-rhel8 GoRed Hat Medium Fix reported
Helm vulnerable to Code Injection through malicious chart.yaml contentCVE-2025-53547 · GHSA-557J-XG8C-Q2MMVersion ranges need review. helm.sh/helm/v3Deployment Validation Operator/dvo/deployment-validation-operator-bundle GoRed Hat High Fix reported
net/http, x/net/http2: close connections when receiving too many headersCVE-2023-45288 · GHSA-4V7X-PQXF-CX7MVersion ranges need review. golang.org/x/net/http2golang.org/x/net GoRed Hat Medium Fix reported
Helm Charts with Specific JSON Schema Values Can Cause Memory ExhaustionCVE-2025-55199 · GHSA-9H84-QMV7-982PVersion ranges need review. helm.sh/helm/v3helm.sh/helm GoRed Hat Medium Fix reported
Helm May Panic Due To Incorrect YAML ContentCVE-2025-55198 · GHSA-F9F8-9PMF-XV68Version ranges need review. helm.sh/helm/v3helm.sh/helm GoRed Hat Medium Fix reported
openssl: Out-of-bounds read & write in RFC 3211 KEK UnwrapCVE-2025-9230 Multicluster Engine for Kubernetes/multicloud-operators-foundationMulticluster Engine for Kubernetes/multicluster-engine/hypershift-addon-rhel9-operator Red Hat Medium No fix reported