OpenShift Pipelines/openshift-pipelines/pipelines-cache-rhel9
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Distrust compromised intermediate certificates in crypto/x509 | rustls-webpkiwebpki-root-certs | Rust / CargoGoRed Hat | High | Fix reported | |
| Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder | github.com/aws/aws-sdk-go-v2/aws/protocol/eventstreamgithub.com/aws/aws-sdk-go-v2/service/bedrockagentcore | GoRed Hat | Medium | Fix reported | |
| Go JOSE Panics in JWE decryption | github.com/go-jose/go-jose/v3github.com/go-jose/go-jose/v4 | GoRed Hat | High | Fix reported | |
| gRPC-Go has an authorization bypass via missing leading slash in :path | google.golang.org/grpcAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 | GoRed Hat | Critical | Fix reported | |
| github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives | github.com/ulikunitz/xzAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9 | GoRed Hat | Medium | Fix reported |