Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator

Red Hat · Package

9 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
golang.org/x/net vulnerable to Cross-site ScriptingCVE-2025-22872 · GHSA-VVGC-356P-C3XWVersion ranges need review.	golang.org/x/net Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8	GoRed Hat	Medium	Fix reported	2026-09-10
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/netCVE-2025-22870 · GHSA-QXP5-GWG8-XV66Version ranges need review.	golang.org/x/net stdlib	GoRed Hat	Medium	Fix reported	2026-09-10
goproxy Denial of Service vulnerabilityCVE-2023-37788 · GHSA-4R8X-2P26-976PVersion ranges need review.	github.com/elazarl/goproxy Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator	GoRed Hat	High	Fix reported	2026-08-07
Sensitive headers incorrectly sent after cross-domain redirect in net/httpCVE-2024-45336 · GO-2025-3420	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8	GoRed Hat	Medium	Fix reported	2026-02-17
golang.org/x/net/html Infinite Loop vulnerabilityCVE-2021-33194 · GHSA-83G2-8M93-V3W7Version ranges need review.	golang.org/x/net Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator	GoRed Hat	High	Fix reported	2026-02-04
Incorrect computation for some invalid field elements in crypto/ellipticCVE-2022-23806 · GO-2021-0319	stdlib Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator	GoRed Hat	Medium	Fix reported	2024-05-20
kibana: Kibana cross-site-scripting (XSS) issue (ESA-2022-08)CVE-2022-23713	Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator Logging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-rhel8-operator	Red Hat	Medium	No fix reported	Not recorded
kibana: Kibana open redirect issue (ESA-2023-03)CVE-2022-38779	Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator Logging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-rhel8-operator	Red Hat	Medium	No fix reported	Not recorded
kibana: Insertion of Sensitive Information into Log File (ESA-2023-25)CVE-2023-46671	Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator Logging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8	Red Hat	Medium	No fix reported	Not recorded