open-cluster-management.io/ocm (Go) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Go package open-cluster-management.io/ocm, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2026-4740 — CVSS 8.2 (high): A flaw was found in Open Cluster Management (OCM), the technology underlying Red Hat Advanced Cluster Management (ACM). Improper validation…
• CVE-2024-9779 — CVSS 7.5 (high): A flaw was found in Open Cluster Management (OCM) when a user has access to the worker nodes which contain the cluster-manager or…