Security
فارسی
All products

Red Hat OpenShift Container Platform 4/openshift-compliance-openscap-container

Red Hat · Package
15 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
HTTP/2 rapid reset can cause excessive work in net/httpCVE-2023-39325 · GHSA-4374-P667-P6C8Version ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
jwt-go allows excessive memory allocation during header parsingCVE-2025-30204 · GHSA-MH63-6H87-95CPVersion ranges need review. github.com/golang-jwt/jwt/v4github.com/golang-jwt/jwt/v5 GoRed Hat High Fix reported
golang.org/x/net vulnerable to Cross-site ScriptingCVE-2025-22872 · GHSA-VVGC-356P-C3XWVersion ranges need review. golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 GoRed Hat Medium Fix reported
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/netCVE-2025-22870 · GHSA-QXP5-GWG8-XV66Version ranges need review. golang.org/x/netstdlib GoRed Hat Medium Fix reported
Non-linear parsing of case-insensitive content in golang.org/x/net/htmlCVE-2024-45338 · GHSA-W32M-9786-JP63 golang.org/x/net/htmlgolang.org/x/net GoRed Hat High Fix reported
`docker cp` allows unexpected chmod of host files in Moby Docker EngineCVE-2021-41089 · GHSA-V994-F8VW-G7J4Version ranges need review. github.com/docker/dockergithub.com/moby/moby GoRed Hat Low Fix reported
Moby (Docker Engine) started with non-empty inheritable Linux process capabilitiesCVE-2022-24769 · GHSA-2MM7-X5H6-5PVQVersion ranges need review. github.com/docker/dockergithub.com/moby/moby GoRed Hat Medium Fix reported
Improper rendering of text nodes in golang.org/x/net/htmlCVE-2023-3978 · GHSA-2WRH-6PVC-2JM9Version ranges need review. golang.org/x/netOpenShift API for Data Protection/oadp/oadp-rhel8-operator GoRed Hat Medium Fix reported
Moby (Docker Engine) Insufficiently restricted permissions on data directoryCVE-2021-41091 · GHSA-3FWX-PJGW-3558Version ranges need review. github.com/docker/dockergithub.com/moby/moby GoRed Hat Medium Fix reported
golang.org/x/text/language Out-of-bounds Read vulnerabilityCVE-2021-38561 · GHSA-PPP9-7JFF-5VJ2Version ranges need review. golang.org/x/textOpenShift Developer Tools and Services/odo GoRed Hat High Fix reported
Clarify Content-Type handlingCVE-2021-41190 · GHSA-MC8V-MGRF-8F4M github.com/opencontainers/distribution-specRed Hat Enterprise Linux 8/container-tools:2.0/buildah GoRed Hat Low Fix reported
Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictionsCVE-2022-36109 · GHSA-RC4R-WH2Q-Q6C4Version ranges need review. github.com/docker/dockerMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Sensitive headers incorrectly sent after cross-domain redirect in net/httpCVE-2024-45336 · GO-2025-3420 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 GoRed Hat Medium Fix reported
golang.org/x/net vulnerable to Uncontrolled Resource ConsumptionCVE-2022-41723 · GHSA-VVPX-J8F3-3W6HVersion ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
RandomAlphaNumeric and CryptoRandomAlphaNumeric are not as random as they should beCVE-2021-4238 · GHSA-XG2H-WX96-XGXR github.com/Masterminds/goutilsOpenShift Developer Tools and Services/helm GoRed Hat Low Fix reported