All products

Red Hat OpenShift Container Platform 4/openshift4/ose-etcd

Red Hat · Package
7 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSONCVE-2024-24786 · GHSA-8R3F-844C-MC37Version ranges need review. google.golang.org/protobuf/encoding/protojsongoogle.golang.org/protobuf/internal/encoding/json GoRed Hat Medium Fix reported
Uncontrolled Resource Consumption in promhttpCVE-2022-21698 · GHSA-CG3Q-J54F-5P7PVersion ranges need review. github.com/prometheus/client_golangCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat High Fix reported
etcd: Watch API authorization bypass via open-ended range requestsCVE-2026-73499 · GHSA-XG4H-6GFC-H4M8 go.etcd.io/etcd/server/v3go.etcd.io/etcd/v3 GoRed Hat High Fix reported
golang.org/x/net vulnerable to Uncontrolled Resource ConsumptionCVE-2022-41723 · GHSA-VVPX-J8F3-3W6HVersion ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
Integer overflow in github.com/gorilla/websocketCVE-2020-27813 · GHSA-3XH2-74W9-5VXMVersion ranges need review. github.com/gorilla/websocketOpenShift Service Mesh 1/servicemesh-grafana GoRed Hat High Fix reported
etcd Key name can be accessed via LeaseTimeToLive APICVE-2023-32082 · GHSA-3P4G-RCW5-8298 github.com/etcd-io/etcdRed Hat Enterprise Linux 7/etcd3 GoRed Hat Low Fix reported
Etcd-io Improper Authentication vulnerabilityCVE-2021-28235 · GHSA-GMPH-WF7J-9GCM go.etcd.io/etcd/v3Logging Subsystem for Red Hat OpenShift/openshift-logging/lokistack-gateway-rhel8 GoRed Hat Critical No fix reported