Red Hat OpenShift Container Platform 4/openshift4/ose-elasticsearch-operator

Red Hat · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Uncontrolled Resource Consumption in promhttpCVE-2022-21698 · GHSA-CG3Q-J54F-5P7PVersion ranges need review.	github.com/prometheus/client_golang Cost Management Metrics Operator/costmanagement-metrics-operator-container	GoRed Hat	High	Fix reported	2026-09-10
golang.org/x/text Infinite loopCVE-2020-14040 · GHSA-5RCV-M4M3-HFH7Version ranges need review.	golang.org/x/text OpenShift Developer Tools and Services/jenkins-operator-container	GoRed Hat	Medium	Fix reported	2026-09-10
Authorization bypass in github.com/dgrijalva/jwt-goCVE-2020-26160 · GHSA-W73W-5M7G-F7QCVersion ranges need review.	github.com/dgrijalva/jwt-go/v4 github.com/dgrijalva/jwt-go	GoRed Hat	High	Fix reported	2026-07-08
Incorrect operations on the P-224 curve in crypto/ellipticCVE-2021-3114 · GO-2021-0235	stdlib OpenShift Serverless/knative-eventing	GoRed Hat	Medium	Fix reported	2024-05-20
Kibana: Cross-site scripting issue (ESA-2022-01)CVE-2022-23707	Logging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-rhel8-operator Logging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8	Red Hat	Medium	No fix reported	Not recorded
kibana: cross-site-scripting (XSS) issue (ESA-2022-04)CVE-2022-23710	Logging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-rhel8-operator Logging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8	Red Hat	Medium	No fix reported	Not recorded
kibana: missing authorization issue (ESA-2022-03)CVE-2022-23709	Logging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-rhel8-operator Logging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8	Red Hat	Medium	No fix reported	Not recorded