Red Hat Advanced Cluster Security 4/rhacs-eng/release-scanner-v4
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Cosign's verify-blob-attestation reports false positive when payload parsing fails | github.com/sigstore/cosign/v2github.com/sigstore/cosign/v3 | GoRed Hat | Medium | Fix reported | |
| pgx contains memory-safety vulnerability | github.com/jackc/pgx/v5Multicluster Engine for Kubernetes/multicluster-engine/assisted-service-9-rhel9 | GoRed Hat | Critical | Fix reported | |
| Memory-safety vulnerability in github.com/jackc/pgx/v5. | github.com/jackc/pgx/v5Custom Metric Autoscaler operator for Red Hat Openshift/redhat-user-workloads/keda-operator | GoRed Hat | Critical | Fix reported |