Red Hat OpenShift Workload Availability 0.8 vulnerabilities

2 known vulnerabilities in Red Hat OpenShift Workload Availability 0.8 from Red Hat. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  golang.org/x/net/http2: Loop with Unreachable Exit Condition

  CVE-2026-33814May 7, 2026Golang.org/x/net

  When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

• 7.0 High severity

  opentelemetry-go: Untrusted Search Path

  CVE-2026-39883Apr 8, 2026Open-telemetry

  OpenTelemetry-Go is the Go implementation of OpenTelemetry. From 1.15.0 to 1.42.0, the fix for CVE-2026-24051 changed the Darwin ioreg command to use an absolute path but left the BSD kenv command using a bare name, allowing the same PATH hijacking attack on B