Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat OpenShift Data Science (RHODS)/rhods/odh-operator-rhel8
Red Hat
· Package
12 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations
CVE-2024-51744 · GHSA-29WX-VH33-7X7R
Version ranges need review.
github.com/golang-jwt/jwt/v4
Builds for Red Hat OpenShift/openshift-builds-triggers-container
Go
Red Hat
Low
Fix reported
2026-09-10
cookie accepts cookie name, path, and domain with out of bounds characters
CVE-2024-47764 · GHSA-PXG6-PF52-XH8X
cookie
Cryostat 3/cookie
npm
Red Hat
Low
Fix reported
2026-09-10
Denial of service in http-proxy-middleware
CVE-2024-21536 · GHSA-C7QV-Q95Q-8V27
http-proxy-middleware
Cryostat 3/io.cryostat-cryostat3
npm
Red Hat
High
Fix reported
2026-09-10
Server-Side Request Forgery in axios
CVE-2024-39338 · GHSA-8HC4-VH64-CXMJ
axios
Migration Toolkit for Runtimes/axios
npm
Red Hat
High
Fix reported
2026-09-10
Express.js Open Redirect in malformed URLs
CVE-2024-29041 · GHSA-RV95-896H-C2VC
express
A-MQ Interconnect 1/qpid-dispatch
npm
Red Hat
Medium
Fix reported
2026-09-10
Denial of service while parsing a tar file due to lack of folders count validation
CVE-2024-28863 · GHSA-F5X3-32G6-XQ36
node-tar
tar
npm
Red Hat
Medium
Fix reported
2026-09-10
Uncontrolled resource consumption in braces
CVE-2024-4068 · GHSA-GRV7-FG5C-XMJG
braces
Cryostat 2/braces
npm
Red Hat
High
Fix reported
2026-09-10
Stack exhaustion in Parse in go/build/constraint
CVE-2024-34158 · GO-2024-3107
stdlib
Machine Deletion Remediation Operator/workload-availability/machine-deletion-remediation-rhel8-operator
Go
Red Hat
Medium
Fix reported
2026-08-05
Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip
CVE-2024-24790 · GO-2024-2887
stdlib
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-waiters-rhel8
Go
Red Hat
Medium
Fix reported
2026-03-23
Stack exhaustion in all Parse functions in go/parser
CVE-2024-34155 · GO-2024-3105
stdlib
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-waiters-rhel8
Go
Red Hat
Medium
Fix reported
2026-02-24
Denial of service due to improper 100-continue handling in net/http
CVE-2024-24791 · GO-2024-2963
stdlib
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-waiters-rhel8
Go
Red Hat
Medium
Fix reported
2026-02-04
Data Amplification in HashiCorp go-getter
CVE-2023-0475 · GHSA-JPXJ-2JVG-6JV9
Version ranges need review.
github.com/hashicorp/go-getter/v2
github.com/hashicorp/go-getter
Go
Red Hat
Medium
Fix reported
2024-05-21
