Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat OpenShift Container Platform 5/openshift5/ose-prometheus-rhel9
Red Hat
· Package
9 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
compress zstd: Panic on two-block frames
CVE-2026-116591 · GHSA-FPMH-FRQ8-7RJ8
github.com/klauspost/compress/zstd
github.com/klauspost/compress
Go
Red Hat
High
Fix reported
2026-11-06
Compress/s2: Integer Overflow or Wraparound and Out-of-bounds Write in compress
CVE-2026-63209 · GHSA-259R-337F-4RFW
Version ranges need review.
github.com/klauspost/compress
File Integrity Operator/compliance/openshift-file-integrity-operator-bundle
Go
Red Hat
High
Fix reported
2026-10-20
Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net
CVE-2026-33814 · GO-2026-4918
golang.org/x/net
stdlib
Go
Red Hat
High
Fix reported
2026-10-16
Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder
CVE-2026-89090 · GHSA-XMRV-PMRH-HHX2
Version ranges need review.
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream
github.com/aws/aws-sdk-go-v2/service/bedrockagentcore
Go
Red Hat
Medium
Fix reported
2026-09-12
Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap
CVE-2026-41568 · GHSA-VP62-88P7-QQF5
Version ranges need review.
github.com/docker/docker
github.com/moby/moby/v2
Go
Red Hat
Medium
Fix reported
2026-09-10
opentelemetry-go's baggage parsing no longer caps raw header length
CVE-2026-41178 · GHSA-5WRP-CWCJ-Q835
go.opentelemetry.io/otel/baggage
go.opentelemetry.io/otel/propagation
Go
Red Hat
Medium
Fix reported
2026-09-10
github.com/buger/jsonparser has a denial of service vulnerability
CVE-2026-32285 · GHSA-6G7G-W4F8-9C9X
Version ranges need review.
github.com/buger/jsonparser
Logging Subsystem for Red Hat OpenShift/openshift-logging/logging-loki-rhel9
Go
Red Hat
High
Fix reported
2026-09-10
Prometheus Azure AD remote write OAuth client secret exposed via config API
CVE-2026-42151 · GHSA-WG65-39GG-5WFJ
Version ranges need review.
github.com/prometheus/prometheus
File Integrity Operator/compliance/openshift-file-integrity-operator-bundle
Go
Red Hat
High
Fix reported
2026-09-09
Prometheus: Remote read endpoint allows denial of service via crafted snappy payload
CVE-2026-42154 · GHSA-8RM2-7QQF-34QM
Version ranges need review.
github.com/prometheus/prometheus/v2
github.com/prometheus/prometheus
Go
Red Hat
High
Fix reported
2026-07-14
