Red Hat Enterprise Linux 9/ubi9/go-toolset
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Checksum database bypass for golang.org/toolchain in cmd/go | toolchainExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 | GoRed Hat | Medium | Fix reported | |
| Checksum bypass for golang.org/fips140 in cmd/go | toolchainExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 | GoRed Hat | Medium | Fix reported | |
| urllib3 allows an unbounded number of links in the decompression chain | urllib3Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 | PyPIRed Hat | High | Fix reported | |
| Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API) | urllib3External Secrets Operator for Red Hat OpenShift/external-secrets-operator/bitwarden-sdk-server-rhel9 | PyPIRed Hat | High | Fix reported | |
| glob CLI: Command injection via -c/--cmd executes matches with shell:true | globLogging Subsystem for Red Hat OpenShift/openshift-logging/logging-curator5-rhel9 | npmRed Hat | High | Fix reported |