Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
OpenShift Serverless/openshift-serverless-1-func-utils-rhel8-container
Red Hat
· Package
13 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec
CVE-2025-22866 · GO-2025-3447
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8
Go
Red Hat
Medium
Fix reported
2026-09-29
jwt-go allows excessive memory allocation during header parsing
CVE-2025-30204 · GHSA-MH63-6H87-95CP
Version ranges need review.
github.com/golang-jwt/jwt/v4
github.com/golang-jwt/jwt/v5
Go
Red Hat
High
Fix reported
2026-09-10
Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto
CVE-2024-45337 · GHSA-V778-237X-GJRC
Version ranges need review.
golang.org/x/crypto
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel8
Go
Red Hat
Critical
Fix reported
2026-09-10
golang.org/x/oauth2 Improper Validation of Syntactic Correctness of Input vulnerability
CVE-2025-22868 · GHSA-6V2P-P543-PHR9
Version ranges need review.
golang.org/x/oauth2
Cryostat 3/cryostat-tech-preview/cryostat-storage-rhel8
Go
Red Hat
High
Fix reported
2026-09-10
golang.org/x/net vulnerable to Cross-site Scripting
CVE-2025-22872 · GHSA-VVGC-356P-C3XW
Version ranges need review.
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8
Go
Red Hat
Medium
Fix reported
2026-09-10
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net
CVE-2025-22870 · GHSA-QXP5-GWG8-XV66
Version ranges need review.
golang.org/x/net
stdlib
Go
Red Hat
Medium
Fix reported
2026-09-10
golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange
CVE-2025-22869 · GHSA-HCG3-Q754-CR77
Version ranges need review.
golang.org/x/crypto
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-reporter-rhel8
Go
Red Hat
High
Fix reported
2026-09-10
go-git clients vulnerable to DoS via maliciously crafted Git server replies
CVE-2025-21614 · GHSA-R9PX-M959-CXF4
Version ranges need review.
github.com/go-git/go-git/v4
github.com/go-git/go-git/v5
Go
Red Hat
High
Fix reported
2026-09-10
go-git has an Argument Injection via the URL field
CVE-2025-21613 · GHSA-V725-9546-7Q7M
Version ranges need review.
github.com/go-git/go-git/v4
github.com/go-git/go-git/v5
Go
Red Hat
Critical
Fix reported
2026-09-10
Non-linear parsing of case-insensitive content in golang.org/x/net/html
CVE-2024-45338 · GHSA-W32M-9786-JP63
golang.org/x/net/html
golang.org/x/net
Go
Red Hat
High
Fix reported
2026-09-10
Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations
CVE-2024-51744 · GHSA-29WX-VH33-7X7R
Version ranges need review.
github.com/golang-jwt/jwt/v4
Builds for Red Hat OpenShift/openshift-builds-triggers-container
Go
Red Hat
Low
Fix reported
2026-09-10
containerd has an integer overflow in User ID handling
CVE-2024-40635 · GHSA-265R-HFXG-FHMG
Version ranges need review.
github.com/containerd/containerd/v2
github.com/containerd/containerd
Go
Red Hat
Medium
Fix reported
2026-09-10
Sensitive headers incorrectly sent after cross-domain redirect in net/http
CVE-2024-45336 · GO-2025-3420
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8
Go
Red Hat
Medium
Fix reported
2026-02-17
