All products

Red Hat OpenShift Container Platform 4/openshift-compliance-operator-container

Red Hat · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
jwt-go allows excessive memory allocation during header parsingCVE-2025-30204 · GHSA-MH63-6H87-95CPVersion ranges need review. github.com/golang-jwt/jwt/v4github.com/golang-jwt/jwt/v5 GoRed Hat High Fix reported
golang.org/x/net vulnerable to Cross-site ScriptingCVE-2025-22872 · GHSA-VVGC-356P-C3XWVersion ranges need review. golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 GoRed Hat Medium Fix reported
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/netCVE-2025-22870 · GHSA-QXP5-GWG8-XV66Version ranges need review. golang.org/x/netstdlib GoRed Hat Medium Fix reported
Non-linear parsing of case-insensitive content in golang.org/x/net/htmlCVE-2024-45338 · GHSA-W32M-9786-JP63 golang.org/x/net/htmlgolang.org/x/net GoRed Hat High Fix reported
Moby (Docker Engine) started with non-empty inheritable Linux process capabilitiesCVE-2022-24769 · GHSA-2MM7-X5H6-5PVQVersion ranges need review. github.com/docker/dockergithub.com/moby/moby GoRed Hat Medium Fix reported
Moby (Docker Engine) Insufficiently restricted permissions on data directoryCVE-2021-41091 · GHSA-3FWX-PJGW-3558Version ranges need review. github.com/docker/dockergithub.com/moby/moby GoRed Hat Medium Fix reported
golang.org/x/text/language Out-of-bounds Read vulnerabilityCVE-2021-38561 · GHSA-PPP9-7JFF-5VJ2Version ranges need review. golang.org/x/textOpenShift Developer Tools and Services/odo GoRed Hat High Fix reported
Clarify Content-Type handlingCVE-2021-41190 · GHSA-MC8V-MGRF-8F4M github.com/opencontainers/distribution-specRed Hat Enterprise Linux 8/container-tools:2.0/buildah GoRed Hat Low Fix reported
Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictionsCVE-2022-36109 · GHSA-RC4R-WH2Q-Q6C4Version ranges need review. github.com/docker/dockerMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported