Security
فارسی
All products

Custom Metric Autoscaler operator for Red Hat Openshift/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel8

Red Hat · Package
7 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
golang.org/x/oauth2 Improper Validation of Syntactic Correctness of Input vulnerabilityCVE-2025-22868 · GHSA-6V2P-P543-PHR9Version ranges need review. golang.org/x/oauth2Cryostat 3/cryostat-tech-preview/cryostat-storage-rhel8 GoRed Hat High Fix reported
golang.org/x/net vulnerable to Cross-site ScriptingCVE-2025-22872 · GHSA-VVGC-356P-C3XWVersion ranges need review. golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 GoRed Hat Medium Fix reported
go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishmentCVE-2025-29923 · GHSA-92CP-5422-2MW7Version ranges need review. github.com/redis/go-redis/v7github.com/redis/go-redis/v8 GoRed Hat Low Fix reported
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/netCVE-2025-22870 · GHSA-QXP5-GWG8-XV66Version ranges need review. golang.org/x/netstdlib GoRed Hat Medium Fix reported
Memory Exhaustion in Expr Parser with Unrestricted InputCVE-2025-29786 · GHSA-93MQ-9FFX-83M2Version ranges need review. github.com/expr-lang/exprCustom Metric Autoscaler operator for Red Hat Openshift/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel8 GoRed Hat High Fix reported
Non-linear parsing of case-insensitive content in golang.org/x/net/htmlCVE-2024-45338 · GHSA-W32M-9786-JP63 golang.org/x/net/htmlgolang.org/x/net GoRed Hat High Fix reported
Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situationsCVE-2024-51744 · GHSA-29WX-VH33-7X7RVersion ranges need review. github.com/golang-jwt/jwt/v4Builds for Red Hat OpenShift/openshift-builds-triggers-container GoRed Hat Low Fix reported