Skip to contentRed Hat Advanced Cluster Management For Kubernetes 2 vulnerabilities
- red hat multicluster engine for kubernetes, advanced cluster management for kubernetes 2 +1 moreHive: exposure of vcenter credentials via clusterprovision in hive / mce / acmCVE-2025-22418.2 High
- red hat .net 6.0 on red hat enterprise linux, cryostat 3, logging subsystem for red hat openshift +52 more +54 moreNpm-serialize-javascript: cross-site scripting (xss) in serialize-javascriptCVE-2024-11831Fix available5.4 Medium
- red hat advanced cluster management for kubernetes 2Open-cluster-management-io/ocm: cluster-manager permissions may allow a worker node to obtain service account tokensCVE-2024-9779Fix available7.5 High
- red hat advanced cluster management for kubernetes 2, openshift data foundation 4.20, rhodf-4.16-rhel-9 +2 moreSubmariner-operator: rbac permissions can allow for the spread of node compromisesCVE-2024-5042Fix available6.6 Medium
- red hat multicluster engine for kubernetes, oadp-1.3-rhel-9, openshift developer tools and services +28 more +30 moreContainers/image: digest type does not guarantee valid typeCVE-2024-3727Fix available8.3 High
- red hat advanced cluster management for kubernetes 2, openshift container platform 3.11, openshift container platform 4.12 +3 more +5 moreCluster-monitoring-operator: credentials leakCVE-2024-11397.7 High
- red hat logging subsystem for red hat openshift, advanced cluster management for kubernetes 2, openshift container platform 4.13 +3 more +5 moreCoredns: cd bit response is cached and served laterCVE-2024-0874Fix available5.3 Medium
- red hat advanced cluster management for kubernetes 2, ansible automation platform 1.2, ansible tower 3 +4 more +6 moreOpenshift api admission checks does not enforce "custom-host" permissionsCVE-2022-32484.4 Medium
- redhat openshift container platform, red hat openshift serverless, openshift service mesh 2.2.x +13 more +15 moreOcp & fips modeCVE-2023-3089Fix available7.0 High
- isaacs node-tar, tar, red hat confidential compute attestation +40 more +42 morenode-tar Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path SanitizationCVE-2026-23745Public exploitFix available8.2 High
- fast-uri, red hat cluster observability operator 1.5.0, confidential compute attestation +53 more +55 morefast-uri vulnerable to host confusion via percent-encoded authority delimitersCVE-2026-6322Fix available7.5 High
- golang net, golang.org/x/net golang.org/x/net/idna, go standard library net/http +147 more +149 moreInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idnaCVE-2026-39821Fix available9.6 Critical