Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat OpenShift Dev Spaces/devspaces/devspaces-rhel9-operator
Red Hat
· Package
10 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
containerd CRI server: Host memory exhaustion through Attach goroutine leak
CVE-2025-64329 · GHSA-M6HQ-P25P-FFR2
Version ranges need review.
github.com/containerd/containerd/v2
github.com/containerd/containerd
Go
Red Hat
Medium
Fix reported
2026-09-10
github.com/go-acme/lego/v4/acme/api does not enforce HTTPS
CVE-2025-54799 · GHSA-Q82R-2J7M-9RV4
Version ranges need review.
github.com/go-acme/lego/v3
github.com/go-acme/lego/v4
Go
Red Hat
Low
Fix reported
2026-09-10
tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter
CVE-2025-54798 · GHSA-52F5-9888-HMC6
tmp
Cryostat 4/io.cryostat-cryostat
npm
Red Hat
Low
Fix reported
2026-09-10
golang.org/x/net vulnerable to Cross-site Scripting
CVE-2025-22872 · GHSA-VVGC-356P-C3XW
Version ranges need review.
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8
Go
Red Hat
Medium
Fix reported
2026-09-10
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net
CVE-2025-22870 · GHSA-QXP5-GWG8-XV66
Version ranges need review.
golang.org/x/net
stdlib
Go
Red Hat
Medium
Fix reported
2026-09-10
Incorrect results returned from Rows.Scan in database/sql
CVE-2025-47907 · GO-2025-3849
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
Go
Red Hat
Medium
Fix reported
2026-05-30
Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion
CVE-2025-55199 · GHSA-9H84-QMV7-982P
Version ranges need review.
helm.sh/helm/v3
helm.sh/helm
Go
Red Hat
Medium
Fix reported
2026-02-04
Helm May Panic Due To Incorrect YAML Content
CVE-2025-55198 · GHSA-F9F8-9PMF-XV68
Version ranges need review.
helm.sh/helm/v3
helm.sh/helm
Go
Red Hat
Medium
Fix reported
2026-02-04
xmltodict: xmltodict XML Injection
CVE-2025-9375
OpenShift Service Mesh 3/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9
OpenShift Service Mesh 3/openshift-service-mesh/istio-cni-rhel9
Red Hat
Medium
No fix reported
Not recorded
fast-redact: fast-redact prototype pollution
CVE-2025-57319
Multicluster Engine for Kubernetes/multicluster-engine/console-mce-rhel8
Multicluster Engine for Kubernetes/multicluster-engine/console-mce-rhel9
Red Hat
Medium
No fix reported
Not recorded
