All products

Red Hat Developer Hub 1/rhdh-orchestrator-dev-preview-beta/controller-rhel9-operator

Red Hat · Package
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Unbounded allocation when parsing GNU sparse map in archive/tarCVE-2025-58183 · GO-2025-4014 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium Fix reported
CIRCL-Fourq: Missing and wrong validation can lead to incorrect resultsCVE-2025-8556 · GHSA-2X5J-VHC8-9CWMVersion ranges need review. github.com/cloudflare/circlBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9 GoRed Hat Low Fix reported
go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishmentCVE-2025-29923 · GHSA-92CP-5422-2MW7Version ranges need review. github.com/redis/go-redis/v7github.com/redis/go-redis/v8 GoRed Hat Low Fix reported
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/netCVE-2025-22870 · GHSA-QXP5-GWG8-XV66Version ranges need review. golang.org/x/netstdlib GoRed Hat Medium Fix reported
Non-linear parsing of case-insensitive content in golang.org/x/net/htmlCVE-2024-45338 · GHSA-W32M-9786-JP63 golang.org/x/net/htmlgolang.org/x/net GoRed Hat High Fix reported
containerd has an integer overflow in User ID handlingCVE-2024-40635 · GHSA-265R-HFXG-FHMGVersion ranges need review. github.com/containerd/containerd/v2github.com/containerd/containerd GoRed Hat Medium Fix reported
Repository Credentials Race Condition Crashes Argo CD ServerCVE-2025-55191 · GHSA-G88P-R42R-PPP9Version ranges need review. github.com/argoproj/argo-cd/v2github.com/argoproj/argo-cd/v3 GoRed Hat Medium Fix reported
Incorrect results returned from Rows.Scan in database/sqlCVE-2025-47907 · GO-2025-3849 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 GoRed Hat Medium Fix reported
argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payloadCVE-2025-59537 · GHSA-WP4P-9PXH-CGX2Version ranges need review. github.com/argoproj/argo-cd/v2github.com/argoproj/argo-cd/v3 GoRed Hat High Fix reported
Helm Allows A Specially Crafted JSON Schema To Cause A Stack OverflowCVE-2025-32387 · GHSA-5XQW-8HWV-WG92Version ranges need review. helm.sh/helm/v3Deployment Validation Operator/deployment-validation-operator-container GoRed Hat Medium Fix reported
Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory TerminationCVE-2025-32386 · GHSA-4HFP-H4CW-HJ8PVersion ranges need review. helm.sh/helm/v3Deployment Validation Operator/deployment-validation-operator-container GoRed Hat Medium Fix reported
Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhookCVE-2025-59538 · GHSA-GPX4-37G2-C8PVVersion ranges need review. github.com/argoproj/argo-cd/v2github.com/argoproj/argo-cd/v3 GoRed Hat High Fix reported