Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat OpenShift Data Science (RHODS)/rhods/odh-operator-base-rhel8
Red Hat
· Package
12 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSON
CVE-2024-24786 · GHSA-8R3F-844C-MC37
Version ranges need review.
google.golang.org/protobuf/encoding/protojson
google.golang.org/protobuf/internal/encoding/json
Go
Red Hat
Medium
Fix reported
2026-10-14
HTTP/2 rapid reset can cause excessive work in net/http
CVE-2023-39325 · GHSA-4374-P667-P6C8
Version ranges need review.
golang.org/x/net
stdlib
Go
Red Hat
High
Fix reported
2026-09-28
Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2024-28180 · GHSA-C5Q2-7R4C-MV6G
Version ranges need review.
github.com/go-jose/go-jose/v3
github.com/go-jose/go-jose/v4
Go
Red Hat
Medium
Fix reported
2026-09-10
Supplementary groups are not set up properly in github.com/containerd/containerd
CVE-2023-25173 · GHSA-HMFX-3PCX-653P
Version ranges need review.
github.com/containerd/containerd
Cryostat 2/cryostat-tech-preview/cryostat-rhel8-operator
Go
Red Hat
Medium
Fix reported
2026-09-10
Archive package allows chmod of file outside of unpack target directory
CVE-2021-32760 · GHSA-C72P-9XMJ-RX3W
Version ranges need review.
github.com/containerd/containerd
Red Hat 3scale API Management Platform 2/3scale-amp2/3scale-rhel7-operator
Go
Red Hat
Medium
Fix reported
2026-09-10
goproxy Denial of Service vulnerability
CVE-2023-37788 · GHSA-4R8X-2P26-976P
Version ranges need review.
github.com/elazarl/goproxy
Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator
Go
Red Hat
High
Fix reported
2026-08-07
pgx SQL Injection via Protocol Message Size Overflow
CVE-2024-27304 · GHSA-MRWW-27VC-GGHV
github.com/jackc/pgx/v4
github.com/jackc/pgx/v5
Go
Red Hat
High
Fix reported
2026-03-14
golang.org/x/net vulnerable to Uncontrolled Resource Consumption
CVE-2022-41723 · GHSA-VVPX-J8F3-3W6H
Version ranges need review.
golang.org/x/net
stdlib
Go
Red Hat
High
Fix reported
2026-02-04
go.mongodb.org/mongo-driver improperly validates cstrings when marshalling Go objects into BSON
CVE-2021-20329 · GHSA-F6MQ-5M25-4R72
Version ranges need review.
go.mongodb.org/mongo-driver
Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9
Go
Red Hat
Medium
Fix reported
2024-09-17
kubeflow: Reflected XSS in /pipelines/artifacts/get
CVE-2023-6571
Red Hat OpenShift Data Science (RHODS)/rhods/odh-kf-notebook-controller-rhel8
Red Hat OpenShift Data Science (RHODS)/rhods/odh-ml-pipelines-api-server-rhel8
Red Hat
Medium
No fix reported
Not recorded
kubeflow: SSRF
CVE-2023-6570
Red Hat OpenShift Data Science (RHODS)/rhods/odh-kf-notebook-controller-rhel8
Red Hat OpenShift Data Science (RHODS)/rhods/odh-ml-pipelines-api-server-rhel8
Red Hat
Medium
No fix reported
Not recorded
envoy: HTTP/2 CPU exhaustion due to CONTINUATION frame flood
CVE-2024-30255
Custom Metric Autoscaler operator for Red Hat Openshift/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel8
Logical Volume Manager Storage/lvms4/topolvm-rhel8
Red Hat
Medium
No fix reported
Not recorded
