Red Hat OpenShift Container Platform 4/openshift4/file-integrity-rhel8-operator

Red Hat · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Moby (Docker Engine) started with non-empty inheritable Linux process capabilitiesCVE-2022-24769 · GHSA-2MM7-X5H6-5PVQVersion ranges need review.	github.com/docker/docker github.com/moby/moby	GoRed Hat	Medium	Fix reported	2026-09-10
Podman publishes a malicious image to public registriesCVE-2022-1227 · GHSA-66VW-V2X9-HW75Version ranges need review.	github.com/containers/podman/v3 github.com/containers/psgo	GoRed Hat	High	Fix reported	2026-09-10
containernetworking/cni improper limitation of path nameCVE-2021-20206 · GHSA-XJQR-G762-PXWPVersion ranges need review.	github.com/containernetworking/cni OpenShift Service Mesh 2.0/servicemesh-cni	GoRed Hat	High	Fix reported	2026-03-14
Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictionsCVE-2022-36109 · GHSA-RC4R-WH2Q-Q6C4Version ranges need review.	github.com/docker/docker Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9	GoRed Hat	Medium	Fix reported	2026-03-03
Incorrect operations on the P-224 curve in crypto/ellipticCVE-2021-3114 · GO-2021-0235	stdlib OpenShift Serverless/knative-eventing	GoRed Hat	Medium	Fix reported	2024-05-20
Zip slip directory exploit in github.com/deislabs/orasCVE-2021-21272 · GHSA-G5V4-5X39-VWHXVersion ranges need review.	github.com/deislabs/oras Red Hat Advanced Cluster Management for Kubernetes 2/endpoint-metrics-operator	GoRed Hat	High	Fix reported	2024-05-20
Uncontrolled Resource Consumption in Apache ThriftCVE-2020-13949 · GHSA-G2FG-MR77-6VRM	org.apache.thrift:libthrift Red Hat Integration Camel K 1/libthrift	MavenRed Hat	High	Fix reported	2023-02-01