Red Hat OpenShift Container Platform 5/openshift5/ose-aws-cluster-api-controllers-rhel9

Red Hat · Package

4 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/htmlCVE-2026-25681 · GO-2026-5029	golang.org/x/net Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9	GoRed Hat	High	Fix reported	2026-09-22
Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream DecoderCVE-2026-89090 · GHSA-XMRV-PMRH-HHX2Version ranges need review.	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream github.com/aws/aws-sdk-go-v2/service/bedrockagentcore	GoRed Hat	Medium	Fix reported	2026-09-12
Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swapCVE-2026-41568 · GHSA-VP62-88P7-QQF5Version ranges need review.	github.com/docker/docker github.com/moby/moby/v2	GoRed Hat	Medium	Fix reported	2026-09-10
NetworkManager: NetworkManager: Local privilege escalation via malformed MUD URLs in dhclient backendCVE-2026-10805	Multicluster Engine for Kubernetes/multicluster-engine/cluster-api-provider-aws-rhel9 Red Hat JBoss Enterprise Application Platform Expansion Pack/networkmanager	Red Hat	Medium	No fix reported	Not recorded