Red Hat OpenShift Data Science (RHODS)/rhods/odh-data-science-pipelines-operator-controller-rhel8

Red Hat · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
HTTP/2 rapid reset can cause excessive work in net/httpCVE-2023-39325 · GHSA-4374-P667-P6C8Version ranges need review.	golang.org/x/net stdlib	GoRed Hat	High	Fix reported	2026-09-28
Non-linear parsing of case-insensitive content in golang.org/x/net/htmlCVE-2024-45338 · GHSA-W32M-9786-JP63	golang.org/x/net/html golang.org/x/net	GoRed Hat	High	Fix reported	2026-09-10
Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situationsCVE-2024-51744 · GHSA-29WX-VH33-7X7RVersion ranges need review.	github.com/golang-jwt/jwt/v4 Builds for Red Hat OpenShift/openshift-builds-triggers-container	GoRed Hat	Low	Fix reported	2026-09-10
Improper rendering of text nodes in golang.org/x/net/htmlCVE-2023-3978 · GHSA-2WRH-6PVC-2JM9Version ranges need review.	golang.org/x/net OpenShift API for Data Protection/oadp/oadp-rhel8-operator	GoRed Hat	Medium	Fix reported	2026-09-10
OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metricsCVE-2023-45142 · GHSA-RCJV-MGP8-QVMRVersion ranges need review.	go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin	GoRed Hat	High	Fix reported	2026-09-10
goproxy Denial of Service vulnerabilityCVE-2023-37788 · GHSA-4R8X-2P26-976PVersion ranges need review.	github.com/elazarl/goproxy Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator	GoRed Hat	High	Fix reported	2026-08-07
consul: Command injection through script checks optionCVE-2023-5332	Custom Metric Autoscaler operator for Red Hat Openshift/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel8 OpenShift Service Mesh 2/consul	Red Hat	High	No fix reported	Not recorded