Red Hat OpenShift Container Platform 4/openshift4/ingress-node-firewall

Red Hat · Package

6 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
golang.org/x/net vulnerable to Cross-site ScriptingCVE-2025-22872 · GHSA-VVGC-356P-C3XWVersion ranges need review.	golang.org/x/net Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8	GoRed Hat	Medium	Fix reported	2026-09-10
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/netCVE-2025-22870 · GHSA-QXP5-GWG8-XV66Version ranges need review.	golang.org/x/net stdlib	GoRed Hat	Medium	Fix reported	2026-09-10
Node Denial of Service via kubelet Checkpoint APICVE-2025-0426 · GHSA-JGFP-53C3-624WVersion ranges need review.	k8s.io/kubernetes Builds for Red Hat OpenShift/openshift-builds/openshift-builds-shared-resource-rhel9	GoRed Hat	Medium	Fix reported	2026-09-10
Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situationsCVE-2024-51744 · GHSA-29WX-VH33-7X7RVersion ranges need review.	github.com/golang-jwt/jwt/v4 Builds for Red Hat OpenShift/openshift-builds-triggers-container	GoRed Hat	Low	Fix reported	2026-09-10
Cilium node based network policies may incorrectly allow workload trafficCVE-2025-30163 · GHSA-C6PF-2V8J-96MCVersion ranges need review.	github.com/cilium/cilium Network Observability Operator/network-observability/network-observability-ebpf-agent-rhel9	GoRed Hat	Low	Fix reported	2026-07-02
Cilium East-west traffic not subject to egress policy enforcement for requests via Gateway API load balancersCVE-2025-30162 · GHSA-24QP-4XX8-3JVJVersion ranges need review.	github.com/cilium/cilium Network Observability Operator/network-observability/network-observability-ebpf-agent-rhel9	GoRed Hat	Low	Fix reported	2026-02-04