Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat OpenShift Dev Spaces/devspaces/devspaces-rhel8-operator
Red Hat
· Package
17 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
golang.org/x/oauth2 Improper Validation of Syntactic Correctness of Input vulnerability
CVE-2025-22868 · GHSA-6V2P-P543-PHR9
Version ranges need review.
golang.org/x/oauth2
Cryostat 3/cryostat-tech-preview/cryostat-storage-rhel8
Go
Red Hat
High
Fix reported
2026-09-10
golang.org/x/net vulnerable to Cross-site Scripting
CVE-2025-22872 · GHSA-VVGC-356P-C3XW
Version ranges need review.
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8
Go
Red Hat
Medium
Fix reported
2026-09-10
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net
CVE-2025-22870 · GHSA-QXP5-GWG8-XV66
Version ranges need review.
golang.org/x/net
stdlib
Go
Red Hat
Medium
Fix reported
2026-09-10
golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange
CVE-2025-22869 · GHSA-HCG3-Q754-CR77
Version ranges need review.
golang.org/x/crypto
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-reporter-rhel8
Go
Red Hat
High
Fix reported
2026-09-10
Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes
CVE-2024-39321 · GHSA-GXRV-WF35-62W9
Version ranges need review.
github.com/traefik/traefik/v2
github.com/traefik/traefik/v3
Go
Red Hat
High
Fix reported
2026-09-10
Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2024-28180 · GHSA-C5Q2-7R4C-MV6G
Version ranges need review.
github.com/go-jose/go-jose/v3
github.com/go-jose/go-jose/v4
Go
Red Hat
Medium
Fix reported
2026-09-10
Improper rendering of text nodes in golang.org/x/net/html
CVE-2023-3978 · GHSA-2WRH-6PVC-2JM9
Version ranges need review.
golang.org/x/net
OpenShift API for Data Protection/oadp/oadp-rhel8-operator
Go
Red Hat
Medium
Fix reported
2026-09-10
Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin
CVE-2023-48795 · GHSA-45X7-PX36-X8W8
Version ranges need review.
russh
golang.org/x/crypto
Rust / Cargo
Go
PyPI
Red Hat
Medium
Fix reported
2026-09-10
Incorrect sanitization of forwarded query parameters in net/http/httputil
CVE-2022-2880 · GO-2022-1038
stdlib
Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-07-15
Memory exhaustion when compiling regular expressions in regexp/syntax
CVE-2022-41715 · GO-2022-1039
stdlib
Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-07-15
Failure to strip relative path components in net/url
CVE-2022-32190 · GO-2022-0988
stdlib
Node HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator
Go
Red Hat
Medium
Fix reported
2026-07-15
Mishandling of corrupt central directory record in archive/zip
CVE-2024-24789 · GO-2024-2888
stdlib
Custom Metric Autoscaler operator for Red Hat Openshift/custom-metrics-autoscaler-tech-preview/custom-metrics-autoscaler-rhel8-operator
Go
Red Hat
Medium
Fix reported
2026-03-23
golang.org/x/net/http2 vulnerable to possible excessive memory growth
CVE-2022-41717 · GHSA-XRJJ-MJ9H-534M
Version ranges need review.
golang.org/x/net/http2
golang.org/x/net
Go
Red Hat
Medium
Fix reported
2026-02-04
golang.org/x/net/http2 Denial of Service vulnerability
CVE-2022-27664 · GHSA-69CG-P879-7622
Version ranges need review.
golang.org/x/net/http2
golang.org/x/net
Go
Red Hat
High
Fix reported
2026-02-04
Panic due to large inputs affecting P-256 curves in crypto/elliptic
CVE-2022-28327 · GO-2022-0435
stdlib
Migration Toolkit for Containers/cpma
Go
Red Hat
Medium
Fix reported
2024-05-20
Panic when decoding Float and Rat types in math/big
CVE-2022-32189 · GO-2022-0537
stdlib
Custom Metric Autoscaler operator for Red Hat Openshift/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel8
Go
Red Hat
Low
Fix reported
2024-05-20
envoy: HTTP/2 CPU exhaustion due to CONTINUATION frame flood
CVE-2024-30255
Custom Metric Autoscaler operator for Red Hat Openshift/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel8
Logical Volume Manager Storage/lvms4/topolvm-rhel8
Red Hat
Medium
No fix reported
Not recorded
