Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Multicluster Engine for Kubernetes/multicluster-engine/hive-rhel8
Red Hat
· Package
17 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Sensitive headers not cleared on cross-origin redirect in net/http
CVE-2025-4673 · GO-2025-3751
stdlib
Cryostat 4/cryostat/cryostat-storage-rhel9
Go
Red Hat
Medium
Fix reported
2026-10-14
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec
CVE-2025-22866 · GO-2025-3447
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8
Go
Red Hat
Medium
Fix reported
2026-09-29
golang.org/x/crypto/ssh/agent has a potential denial of service
CVE-2025-47913 · GHSA-56W8-48FP-6MGV
golang.org/x/crypto/ssh/agent
golang.org/x/crypto
Go
Red Hat
High
Fix reported
2026-09-10
golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read
CVE-2025-47914 · GHSA-F6X5-JH6R-WRFV
Version ranges need review.
golang.org/x/crypto
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption
CVE-2025-58181 · GHSA-J5W8-Q4QC-RX2X
Version ranges need review.
golang.org/x/crypto
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations
CVE-2024-51744 · GHSA-29WX-VH33-7X7R
Version ranges need review.
github.com/golang-jwt/jwt/v4
Builds for Red Hat OpenShift/openshift-builds-triggers-container
Go
Red Hat
Low
Fix reported
2026-09-10
Bare Metal Operator (BMO) can expose any secret from other namespaces via BMCEventSubscription CRD
CVE-2025-29781 · GHSA-C98H-7HP9-V9HQ
Version ranges need review.
github.com/metal3-io/baremetal-operator/apis
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-reporter-rhel8
Go
Red Hat
Medium
Fix reported
2026-03-03
Stack exhaustion in all Parse functions in go/parser
CVE-2024-34155 · GO-2024-3105
stdlib
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-waiters-rhel8
Go
Red Hat
Medium
Fix reported
2026-02-24
Stack exhaustion in Decoder.Decode in encoding/gob
CVE-2024-34156 · GO-2024-3106
stdlib
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-waiters-rhel8
Go
Red Hat
High
Fix reported
2026-02-24
Sensitive headers incorrectly sent after cross-domain redirect in net/http
CVE-2024-45336 · GO-2025-3420
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8
Go
Red Hat
Medium
Fix reported
2026-02-17
Comments in display names are incorrectly handled in net/mail
CVE-2024-24784 · GO-2024-2609
stdlib
Multicluster Engine for Kubernetes/multicluster-engine/hive-rhel8
Go
Red Hat
Medium
Fix reported
2026-02-04
Denial of service due to improper 100-continue handling in net/http
CVE-2024-24791 · GO-2024-2963
stdlib
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-waiters-rhel8
Go
Red Hat
Medium
Fix reported
2026-02-04
Verify panics on certificates with an unknown public key algorithm in crypto/x509
CVE-2024-24783 · GO-2024-2598
stdlib
Cost Management Metrics Operator/costmanagement-metrics-operator-container
Go
Red Hat
Medium
Fix reported
2026-02-04
Errors returned from JSON marshaling may break template escaping in html/template
CVE-2024-24785 · GO-2024-2610
stdlib
Cost Management Metrics Operator/costmanagement-metrics-operator-container
Go
Red Hat
Medium
Fix reported
2026-02-04
Malformed DNS message can cause infinite loop in net
CVE-2024-24788 · GO-2024-2824
stdlib
Cost Management Metrics Operator/costmanagement-metrics-operator-container
Go
Red Hat
Medium
Fix reported
2026-02-04
Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http
CVE-2023-45289 · GO-2024-2600
stdlib
Builds for Red Hat OpenShift/openshift-builds-triggers-container
Go
Red Hat
Medium
Fix reported
2026-02-04
Memory exhaustion in multipart form parsing in net/textproto and net/http
CVE-2023-45290 · GO-2024-2599
stdlib
Cost Management Metrics Operator/costmanagement-metrics-operator-container
Go
Red Hat
Medium
Fix reported
2026-02-04
