Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat OpenShift Container Platform 5/openshift5/ose-cloud-credential-rhel9-operator
Red Hat
· Package
4 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net
CVE-2026-33814 · GO-2026-4918
golang.org/x/net
stdlib
Go
Red Hat
High
Fix reported
2026-10-16
Invoking duplicate attributes can cause XSS in golang.org/x/net/html
CVE-2026-27136 · GO-2026-5030
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
High
Fix reported
2026-09-22
Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder
CVE-2026-89090 · GHSA-XMRV-PMRH-HHX2
Version ranges need review.
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream
github.com/aws/aws-sdk-go-v2/service/bedrockagentcore
Go
Red Hat
Medium
Fix reported
2026-09-12
cloud-credential-operator: CCO Mint-mode CredentialsRequest manifests grant account-wide IAM access beyond cluster scope on AWS
CVE-2026-10843
Red Hat OpenShift Container Platform 4/openshift4/ose-cloud-credential-operator
Red Hat OpenShift Container Platform 4/openshift4/ose-cloud-credential-rhel9-operator
Red Hat
High
No fix reported
Not recorded
