Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Advanced Cluster Security 3/advanced-cluster-security/rhacs-central-db-rhel8
Red Hat
· Package
14 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Potential memory exhaustion attack due to sparse slice deserialization
CVE-2024-37298 · GHSA-3669-72X9-R9P3
Version ranges need review.
github.com/gorilla/schema
Red Hat Advanced Cluster Security 3/advanced-cluster-security/rhacs-central-db-rhel8
Go
Red Hat
High
Fix reported
2026-09-10
ip SSRF improper categorization in isPublic
CVE-2024-29415 · GHSA-2P57-RM9W-GVFP
ip
Red Hat Advanced Cluster Security 3/advanced-cluster-security/rhacs-central-db-rhel8
npm
Red Hat
High
No fix reported
2026-09-10
github.com/containers/image allows unexpected authenticated registry accesses
CVE-2024-3727 · GHSA-6WVF-F2VW-3425
Version ranges need review.
github.com/containers/image/v5
github.com/containers/image
Go
Red Hat
High
Fix reported
2026-09-10
pgx SQL Injection via Line Comment Creation
CVE-2024-27289 · GHSA-M7WR-2XF7-CM9P
Version ranges need review.
github.com/jackc/pgx/v4
github.com/jackc/pgx
Go
Red Hat
High
Fix reported
2026-09-10
Express.js Open Redirect in malformed URLs
CVE-2024-29041 · GHSA-RV95-896H-C2VC
express
A-MQ Interconnect 1/qpid-dispatch
npm
Red Hat
Medium
Fix reported
2026-09-10
Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients
CVE-2023-49569 · GHSA-449P-3H89-PW88
Version ranges need review.
github.com/go-git/go-git/v5
gopkg.in/src-d/go-git.v4
Go
Red Hat
Critical
Fix reported
2026-09-10
Maliciously crafted Git server replies can cause DoS on go-git clients
CVE-2023-49568 · GHSA-MW99-9CHC-XW7R
Version ranges need review.
github.com/go-git/go-git/v5
gopkg.in/src-d/go-git.v4
Go
Red Hat
High
Fix reported
2026-09-10
Mishandling of corrupt central directory record in archive/zip
CVE-2024-24789 · GO-2024-2888
stdlib
Custom Metric Autoscaler operator for Red Hat Openshift/custom-metrics-autoscaler-tech-preview/custom-metrics-autoscaler-rhel8-operator
Go
Red Hat
Medium
Fix reported
2026-03-23
pgx SQL Injection via Protocol Message Size Overflow
CVE-2024-27304 · GHSA-MRWW-27VC-GGHV
github.com/jackc/pgx/v4
github.com/jackc/pgx/v5
Go
Red Hat
High
Fix reported
2026-03-14
Helm vulnerable to denial of service through string value parsing
CVE-2022-23524 · GHSA-6RX9-889Q-VV2R
Version ranges need review.
helm.sh/helm/v3
OpenShift Developer Tools and Services/jenkins-operator-container
Go
Red Hat
Medium
Fix reported
2026-02-04
Helm vulnerable to denial of service through schema file
CVE-2022-23526 · GHSA-67FX-WX78-JX33
Version ranges need review.
helm.sh/helm/v3
OpenShift Developer Tools and Services/helm
Go
Red Hat
Medium
Fix reported
2026-02-04
Cosign vulnerable to possible endless data attack from attacker-controlled registry
CVE-2023-46737 · GHSA-VFP6-JRW2-99G9
Version ranges need review.
github.com/sigstore/cosign/v2
github.com/sigstore/cosign
Go
Red Hat
Low
Fix reported
2026-02-04
Helm vulnerable to denial of service through through repository index file
CVE-2022-23525 · GHSA-53C4-HHMH-VW5Q
Version ranges need review.
helm.sh/helm/v3
OpenShift Developer Tools and Services/jenkins-operator-container
Go
Red Hat
Medium
Fix reported
2026-02-04
nodejs-async: Regular expression denial of service while parsing function in autoinject
CVE-2024-39249
Migration Toolkit for Applications 6/async
Migration Toolkit for Applications 6/mta/mta-ui-rhel9
Red Hat
Medium
No fix reported
Not recorded
