Red Hat Openshift Sandboxed Containers/openshift-sandboxed-containers/osc-cloud-api-adaptor-rhel9

Red Hat · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
jwt-go allows excessive memory allocation during header parsingCVE-2025-30204 · GHSA-MH63-6H87-95CPVersion ranges need review.	github.com/golang-jwt/jwt/v4 github.com/golang-jwt/jwt/v5	GoRed Hat	High	Fix reported	2026-09-10
Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/cryptoCVE-2024-45337 · GHSA-V778-237X-GJRCVersion ranges need review.	golang.org/x/crypto Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel8	GoRed Hat	Critical	Fix reported	2026-09-10
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/netCVE-2025-22870 · GHSA-QXP5-GWG8-XV66Version ranges need review.	golang.org/x/net stdlib	GoRed Hat	Medium	Fix reported	2026-09-10
golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key ExchangeCVE-2025-22869 · GHSA-HCG3-Q754-CR77Version ranges need review.	golang.org/x/crypto Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-reporter-rhel8	GoRed Hat	High	Fix reported	2026-09-10
Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situationsCVE-2024-51744 · GHSA-29WX-VH33-7X7RVersion ranges need review.	github.com/golang-jwt/jwt/v4 Builds for Red Hat OpenShift/openshift-builds-triggers-container	GoRed Hat	Low	Fix reported	2026-09-10
containerd has an integer overflow in User ID handlingCVE-2024-40635 · GHSA-265R-HFXG-FHMGVersion ranges need review.	github.com/containerd/containerd/v2 github.com/containerd/containerd	GoRed Hat	Medium	Fix reported	2026-09-10
Improper input validation in github.com/gin-gonic/ginCVE-2023-26125 · GHSA-3VP4-M3RF-835H	github.com/gin-gonic/gin Migration Toolkit for Applications 6/mta/mta-admin-addon-rhel8	GoRed Hat	Medium	Fix reported	2025-01-29