All products

Red Hat Openshift Data Foundation 4/odf4/odf-lvm-rhel8-operator

Red Hat · Package
5 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Supplementary groups are not set up properly in github.com/containerd/containerdCVE-2023-25173 · GHSA-HMFX-3PCX-653PVersion ranges need review. github.com/containerd/containerdCryostat 2/cryostat-tech-preview/cryostat-rhel8-operator GoRed Hat Medium Fix reported
goproxy Denial of Service vulnerabilityCVE-2023-37788 · GHSA-4R8X-2P26-976PVersion ranges need review. github.com/elazarl/goproxyLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator GoRed Hat High Fix reported
Command Injection Vulnerability with Mercurial in VCSCVE-2022-21235 · GHSA-6635-C626-VJ4RVersion ranges need review. github.com/Masterminds/vcsOpenShift Serverless/openshift-serverless-1/ingress-rhel8-operator GoRed Hat Critical Fix reported
golang.org/x/net/http2 vulnerable to possible excessive memory growthCVE-2022-41717 · GHSA-XRJJ-MJ9H-534MVersion ranges need review. golang.org/x/net/http2golang.org/x/net GoRed Hat Medium Fix reported
Helm vulnerable to information disclosure via getHostByName Function CVE-2023-25165 · GHSA-PWCW-6F5G-GXF8Version ranges need review. helm.sh/helm/v3Cryostat 2/cryostat-tech-preview/cryostat-rhel8-operator GoRed Hat Medium Fix reported