Red Hat OpenShift Container Platform 4/openshift4/ose-descheduler

Red Hat · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situationsCVE-2024-51744 · GHSA-29WX-VH33-7X7RVersion ranges need review.	github.com/golang-jwt/jwt/v4 Builds for Red Hat OpenShift/openshift-builds-triggers-container	GoRed Hat	Low	Fix reported	2026-09-10
Uncontrolled Resource Consumption in promhttpCVE-2022-21698 · GHSA-CG3Q-J54F-5P7PVersion ranges need review.	github.com/prometheus/client_golang Cost Management Metrics Operator/costmanagement-metrics-operator-container	GoRed Hat	High	Fix reported	2026-09-10
OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metricsCVE-2023-45142 · GHSA-RCJV-MGP8-QVMRVersion ranges need review.	go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin	GoRed Hat	High	Fix reported	2026-09-10
Improper Verification of Cryptographic Signature in golang.org/x/cryptoCVE-2020-9283 · GHSA-FFHG-7MH4-33C4Version ranges need review.	golang.org/x/crypto OpenShift Service Mesh 1/jaeger-operator	GoRed Hat	High	Fix reported	2026-09-10
Authorization bypass in github.com/dgrijalva/jwt-goCVE-2020-26160 · GHSA-W73W-5M7G-F7QCVersion ranges need review.	github.com/dgrijalva/jwt-go/v4 github.com/dgrijalva/jwt-go	GoRed Hat	High	Fix reported	2026-07-08
Sensitive headers incorrectly sent after cross-domain redirect in net/httpCVE-2024-45336 · GO-2025-3420	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8	GoRed Hat	Medium	Fix reported	2026-02-17
golang.org/x/net vulnerable to Uncontrolled Resource ConsumptionCVE-2022-41723 · GHSA-VVPX-J8F3-3W6HVersion ranges need review.	golang.org/x/net stdlib	GoRed Hat	High	Fix reported	2026-02-04