Red Hat OpenShift Container Platform 4/openshift4/compliance-rhel8-operator

Red Hat · Package

6 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Moby (Docker Engine) started with non-empty inheritable Linux process capabilitiesCVE-2022-24769 · GHSA-2MM7-X5H6-5PVQVersion ranges need review.	github.com/docker/docker github.com/moby/moby	GoRed Hat	Medium	Fix reported	2026-09-10
golang.org/x/text/language Out-of-bounds Read vulnerabilityCVE-2021-38561 · GHSA-PPP9-7JFF-5VJ2Version ranges need review.	golang.org/x/text OpenShift Developer Tools and Services/odo	GoRed Hat	High	Fix reported	2026-09-10
Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictionsCVE-2022-36109 · GHSA-RC4R-WH2Q-Q6C4Version ranges need review.	github.com/docker/docker Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9	GoRed Hat	Medium	Fix reported	2026-03-03
Incorrect operations on the P-224 curve in crypto/ellipticCVE-2021-3114 · GO-2021-0235	stdlib OpenShift Serverless/knative-eventing	GoRed Hat	Medium	Fix reported	2024-05-20
Zip slip directory exploit in github.com/deislabs/orasCVE-2021-21272 · GHSA-G5V4-5X39-VWHXVersion ranges need review.	github.com/deislabs/oras Red Hat Advanced Cluster Management for Kubernetes 2/endpoint-metrics-operator	GoRed Hat	High	Fix reported	2024-05-20
Uncontrolled Resource Consumption in Apache ThriftCVE-2020-13949 · GHSA-G2FG-MR77-6VRM	org.apache.thrift:libthrift Red Hat Integration Camel K 1/libthrift	MavenRed Hat	High	Fix reported	2023-02-01