Security
فارسی
All products

Red Hat 3scale API Management Platform 2/3scale-amp2/apicast-rhel7-operator

Red Hat · Package
22 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/netCVE-2026-33814 · GO-2026-4918 golang.org/x/netstdlib GoRed Hat High Fix reported
Memory exhaustion in query parameter parsing in net/urlCVE-2025-61726 · GO-2026-4341 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 GoRed Hat High Fix reported
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistecCVE-2025-22866 · GO-2025-3447 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 GoRed Hat Medium Fix reported
HTTP/2 rapid reset can cause excessive work in net/httpCVE-2023-39325 · GHSA-4374-P667-P6C8Version ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
Uncontrolled Resource Consumption in promhttpCVE-2022-21698 · GHSA-CG3Q-J54F-5P7PVersion ranges need review. github.com/prometheus/client_golangCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat High Fix reported
Path Traversal: 'dir/../../filename' in moment.localeCVE-2022-24785 · GHSA-8HFJ-J24R-96C4 momentmoment.js npmNuGetRed Hat High Fix reported
OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metricsCVE-2023-45142 · GHSA-RCJV-MGP8-QVMRVersion ranges need review. go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestfulgo.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin GoRed Hat High Fix reported
containerd-shim API Exposed to Host Network ContainersCVE-2020-15257 · GHSA-36XW-FX78-C5R4Version ranges need review. github.com/containerd/containerdRed Hat 3scale API Management Platform 2/3scale-amp2/3scale-rhel7-operator GoRed Hat Medium Fix reported
Excessive resource consumption when printing error string for host certificate validation in crypto/x509CVE-2025-61729 · GO-2025-4155 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 GoRed Hat High Fix reported
goproxy Denial of Service vulnerabilityCVE-2023-37788 · GHSA-4R8X-2P26-976PVersion ranges need review. github.com/elazarl/goproxyLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator GoRed Hat High Fix reported
Lack of limit when parsing cookies can cause memory exhaustion in net/httpCVE-2025-58186 · GO-2025-4012 stdlibCryostat 4/cryostat/cryostat-grafana-dashboard-rhel9 GoRed Hat Low Fix reported
Prototype Pollution in minimistCVE-2021-44906 · GHSA-XVCH-5GV4-984H minimistMigration Toolkit for Containers/rhmtc/openshift-migration-ui-rhel8 npmRed Hat Critical Fix reported
Sensitive headers incorrectly sent after cross-domain redirect in net/httpCVE-2024-45336 · GO-2025-3420 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 GoRed Hat Medium Fix reported
Improper Verification of Cryptographic Signature in node-forgeCVE-2022-24772 · GHSA-X4JG-MJRX-434G node-forgeMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed Hat High Fix reported
Improper Verification of Cryptographic Signature in node-forgeCVE-2022-24771 · GHSA-CFM4-QJH2-4765 node-forgeMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed Hat High Fix reported
go.mongodb.org/mongo-driver improperly validates cstrings when marshalling Go objects into BSONCVE-2021-20329 · GHSA-F6MQ-5M25-4R72Version ranges need review. go.mongodb.org/mongo-driverMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Stack overflow from a large amount of PEM data in encoding/pemCVE-2022-24675 · GO-2022-0433 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Session tickets lack random ticket_age_add in crypto/tlsCVE-2022-30629 · GO-2022-0531 stdlibMigration Toolkit for Containers/cpma GoRed Hat Low Fix reported
Integer overflow in github.com/gorilla/websocketCVE-2020-27813 · GHSA-3XH2-74W9-5VXMVersion ranges need review. github.com/gorilla/websocketOpenShift Service Mesh 1/servicemesh-grafana GoRed Hat High Fix reported
Improper Verification of Cryptographic Signature in `node-forge`CVE-2022-24773 · GHSA-2R2C-G63R-VCCR node-forgeMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed Hat Medium Fix reported