Multicluster Engine for Kubernetes/multicluster-engine/hypershift-rhel8-operator
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read | golang.org/x/cryptoAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9 | GoRed Hat | Medium | Fix reported | |
| golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption | golang.org/x/cryptoBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9 | GoRed Hat | Medium | Fix reported | |
| DoS in go-jose Parsing | github.com/go-jose/go-jose/v3github.com/go-jose/go-jose/v4 | GoRed Hat | Medium | Fix reported | |
| Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations | github.com/golang-jwt/jwt/v4Builds for Red Hat OpenShift/openshift-builds-triggers-container | GoRed Hat | Low | Fix reported |