Product by Red Hat
Red Hat Openshift Gitops
11 known vulnerabilities in Red Hat Openshift Gitops (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
11
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-1394 | Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads | 7.5 | |
| Critical | CVE-2025-13888 | Openshift-gitops-operator: openshift gitops: namespace admin cluster takeover via privileged jobs | 9.1 | |
| High | CVE-2026-15416 | Red Hat OpenShift GitOps: Missing Authentication for Critical Function | 8.9 | |
| Critical | CVE-2026-6388 | Red Hat OpenShift GitOps: Insufficient Granularity of Access Control | 9.1 | |
| Medium | CVE-2026-114406 | Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns | 6.8 | |
| High | CVE-2026-14251 | Red Hat OpenShift GitOps: Missing Authorization | 7.7 | |
| Medium | CVE-2024-9355 | Golang-fips: golang fips zeroed buffer | 6.5 | |
| Medium | CVE-2023-6717 | Keycloak: xss via assertion consumer service url in saml post-binding flow | 6.0 | |
| Medium | CVE-2025-11065 | Github.com/go-viper/mapstructure/v2: Generation of Error Message Containing Sensitive Information | 5.3 | |
| Medium | CVE-2024-12401 | Cert-manager: potential dos when parsing specially crafted pem inputs | 4.4 | |
| Low | CVE-2025-8556 | Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results | 3.7 |