Red Hat OpenShift Container Platform 3.10/atomic-openshift

Red Hat · Package

13 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
golang.org/x/crypto/salsa20/salsa uses insufficiently random valuesCVE-2019-11840 · GHSA-R5C5-PR8J-PFP7Version ranges need review.	golang.org/x/crypto Red Hat OpenShift Container Platform 3.10/atomic-openshift	GoRed Hat	Medium	Fix reported	2026-09-10
Kubernetes client-go library logs may disclose credentials to unauthorized usersCVE-2019-11250 · GHSA-JMRX-5G74-6V2FVersion ranges need review.	k8s.io/client-go k8s.io/kubernetes	GoRed Hat	Medium	Fix reported	2026-09-10
Kubernetes Arbitrary Command InjectionCVE-2018-1002101 · GHSA-WQWF-X5CJ-RG56Version ranges need review.	k8s.io/kubernetes Red Hat OpenShift Container Platform 3.10/atomic-openshift	GoRed Hat	Medium	Fix reported	2026-09-10
Kubernetes kubectl cp Vulnerable to Symlink AttackCVE-2019-11251 · GHSA-6QFG-8799-R575Version ranges need review.	k8s.io/kubernetes Red Hat OpenShift Container Platform 3.10/atomic-openshift	GoRed Hat	Medium	Fix reported	2026-03-03
Denial of service in chain verification in crypto/x509CVE-2018-16875 · GO-2022-0191	stdlib Red Hat Ceph Storage 2/golang	GoRed Hat	Medium	Fix reported	2024-05-20
Remote command execution via "go get" with "-u" flag in cmd/goCVE-2018-16873 · GO-2022-0189	toolchain Red Hat Ceph Storage 2/golang	GoRed Hat	Medium	Fix reported	2024-05-20
Request smuggling due to accepting invalid headers in net/http via net/textprotoCVE-2019-16276 · GO-2022-0212	stdlib Red Hat Ceph Storage 2/golang	GoRed Hat	Medium	Fix reported	2024-05-20
Panic on invalid DSA public keys in crypto/dsaCVE-2019-17596 · GO-2022-0213	stdlib Red Hat Ceph Storage 2/golang	GoRed Hat	Medium	Fix reported	2024-05-20
Improper Input Validation in libseccomp-golangCVE-2017-18367 · GHSA-58V3-J75H-XR49Version ranges need review.	github.com/seccomp/libseccomp-golang Red Hat OpenShift Container Platform 3.10/atomic-openshift	GoRed Hat	High	Fix reported	2024-05-20
Kubernetes Unsafe Cacheing CVE-2019-11244 · GHSA-2575-PGHM-6QQX	k8s.io/client-go Red Hat OpenShift Container Platform 3.10/atomic-openshift	GoRed Hat	Medium	Fix reported	2023-11-08
web-console: XSS in OAuth server /oauth/token/request endpointCVE-2019-3876	Red Hat OpenShift Container Platform 3.10/atomic-openshift Red Hat OpenShift Container Platform 3.4/atomic-openshift	Red Hat	Medium	No fix reported	Not recorded
atomic-openshift: cross-namespace owner references can trigger deletions of valid childrenCVE-2019-3884	Red Hat OpenShift Container Platform 3.10/atomic-openshift Red Hat OpenShift Container Platform 3.11/atomic-openshift	Red Hat	Low	No fix reported	Not recorded
atomic-openshift: reflected XSS in authentication flowCVE-2019-3889	Red Hat OpenShift Container Platform 3.10/atomic-openshift Red Hat OpenShift Container Platform 3.4/atomic-openshift	Red Hat	Medium	No fix reported	Not recorded