Red Hat OpenShift Virtualization 2/container-native-virtualization/vm-import-controller

Red Hat · Package

9 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Moby (Docker Engine) started with non-empty inheritable Linux process capabilitiesCVE-2022-24769 · GHSA-2MM7-X5H6-5PVQVersion ranges need review.	github.com/docker/docker github.com/moby/moby	GoRed Hat	Medium	Fix reported	2026-09-10
golang.org/x/text/language Out-of-bounds Read vulnerabilityCVE-2021-38561 · GHSA-PPP9-7JFF-5VJ2Version ranges need review.	golang.org/x/text OpenShift Developer Tools and Services/odo	GoRed Hat	High	Fix reported	2026-09-10
Infinite loop when decoding inputs in encoding/xmlCVE-2021-27918 · GO-2021-0234	stdlib Distributed Tracing Jaeger 1/distributed-tracing/jaeger-all-in-one-rhel8	GoRed Hat	Medium	Fix reported	2024-05-20
Panic in ReverseProxy in net/http/httputilCVE-2021-36221 · GO-2021-0245	stdlib OpenShift Serverless/knative-eventing	GoRed Hat	Medium	Fix reported	2024-05-20
Misdirected I/O in syscallCVE-2021-44717 · GO-2022-0289	stdlib Migration Toolkit for Containers/cpma	GoRed Hat	Medium	Fix reported	2024-05-20
Incorrect access control in the go command in cmd/go/internal/modfetchCVE-2022-23773 · GO-2022-0318	toolchain Migration Toolkit for Containers/cpma	GoRed Hat	Medium	Fix reported	2024-05-20
Stack exhaustion when compiling deeply nested expressions in regexpCVE-2022-24921 · GO-2021-0347	stdlib Migration Toolkit for Containers/cpma	GoRed Hat	Medium	Fix reported	2024-05-20
golang.org/x/net/http2 allows uncontrolled memory consumptionCVE-2021-44716 · GHSA-VC3P-29H2-GPCP	golang.org/x/net/http2 golang.org/x/net	GoRed Hat	High	Fix reported	2024-05-20
golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octetCVE-2021-29923	Migration Toolkit for Containers/rhmtc/openshift-migration-must-gather-rhel8 Migration Toolkit for Containers/rhmtc/openshift-migration-registry-rhel8	Red Hat	Medium	No fix reported	Not recorded