| golang.org/x/net vulnerable to Cross-site ScriptingCVE-2025-22872 · GHSA-VVGC-356P-C3XWVersion ranges need review. |
golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 |
GoRed Hat |
Medium
|
Fix reported |
|
| HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/netCVE-2025-22870 · GHSA-QXP5-GWG8-XV66Version ranges need review. |
golang.org/x/netstdlib |
GoRed Hat |
Medium
|
Fix reported |
|
| Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situationsCVE-2024-51744 · GHSA-29WX-VH33-7X7RVersion ranges need review. |
github.com/golang-jwt/jwt/v4Builds for Red Hat OpenShift/openshift-builds-triggers-container |
GoRed Hat |
Low
|
Fix reported |
|
| Grafana plugin SDK Information LeakageCVE-2024-8986 · GHSA-XXXW-3J6H-Q7H6Version ranges need review. |
github.com/grafana/grafana-plugin-sdk-goRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/acm-grafana-rhel8 |
GoRed Hat |
Critical
|
Fix reported |
|
| x/crypto/ssh vulnerable to panic via malformed packetsCVE-2021-43565 · GHSA-GWC9-M7RH-J2WWVersion ranges need review. |
golang.org/x/cryptoMigration Toolkit for Containers/rhmtc/openshift-migration-velero-rhel8 |
GoRed Hat |
High
|
Fix reported |
|
| Mattermost allows user with systems manager role with read-only access to teams to perform write operations on teamsCVE-2024-42497 · GHSA-FXQ9-6946-34Q7Version ranges need review. |
github.com/mattermost/mattermost-server/v5github.com/mattermost/mattermost-server/v6 |
GoRed Hat |
High
|
Fix reported |
|
| Mattermost allows team admin user without "Add Team Members" permission to disable invite URLCVE-2024-40884 · GHSA-3J95-8G47-FPWHVersion ranges need review. |
github.com/mattermost/mattermost-server/v5github.com/mattermost/mattermost-server/v6 |
GoRed Hat |
Medium
|
Fix reported |
|
| Mattermost allows guest user with read access to upload files to a channelCVE-2024-43780 · GHSA-2JHX-W3VC-W59GVersion ranges need review. |
github.com/mattermost/mattermost-server/v5github.com/mattermost/mattermost-server/v6 |
GoRed Hat |
Medium
|
Fix reported |
|
| Mattermost fails to limit the number of active sessionsCVE-2024-4183 · GHSA-WJ37-MPQ9-XRCMVersion ranges need review. |
github.com/mattermost/mattermost-serverRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/acm-grafana-rhel8 |
GoRed Hat |
Medium
|
Fix reported |
|
| Mattermost crashes web clients via a malformed custom statusCVE-2024-4182 · GHSA-8F99-G2PJ-X8W3Version ranges need review. |
github.com/mattermost/mattermost-serverRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/acm-grafana-rhel8 |
GoRed Hat |
Medium
|
Fix reported |
|
| Mattermost's detailed error messages reveal the full file pathCVE-2024-32046 · GHSA-VX97-8Q8Q-QGQ5Version ranges need review. |
github.com/mattermost/mattermost-serverRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/acm-grafana-rhel8 |
GoRed Hat |
Medium
|
Fix reported |
|
| Mattermost allows team admins to promote guests to team adminsCVE-2024-4195 · GHSA-5FH7-7MW7-MMX5Version ranges need review. |
github.com/mattermost/mattermost-serverRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/acm-grafana-rhel8 |
GoRed Hat |
Low
|
Fix reported |
|
| Mattermost fails to limit the size of a request pathCVE-2024-22091 · GHSA-P2WQ-4GGP-45F3Version ranges need review. |
github.com/mattermost/mattermost-serverRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/acm-grafana-rhel8 |
GoRed Hat |
Low
|
Fix reported |
|
| Mattermost fails to fully validate role changesCVE-2024-4198 · GHSA-5QX9-9FFJ-5R8FVersion ranges need review. |
github.com/mattermost/mattermost-serverRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/acm-grafana-rhel8 |
GoRed Hat |
Low
|
Fix reported |
|
| Incorrect Authorization in NATS nats-serverCVE-2022-24450 · GHSA-G6W6-R76C-28J7Version ranges need review. |
github.com/nats-io/nats-server/v2github.com/nats-io/nats-server |
GoRed Hat |
High
|
Fix reported |
|
| Sensitive headers incorrectly sent after cross-domain redirect in net/httpCVE-2024-45336 · GO-2025-3420 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 |
GoRed Hat |
Medium
|
Fix reported |
|
| Grafana Plugin signature bypassCVE-2022-31123 · GHSA-RHXJ-GH46-JVW8Version ranges need review. |
github.com/grafana/grafanaRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/acm-grafana-rhel8 |
GoRed Hat |
High
|
Fix reported |
|
| Grafana Data source and plugin proxy endpoints could leak the authentication cookie to some destination pluginsCVE-2022-39201 · GHSA-X744-MM8V-VPGRVersion ranges need review. |
github.com/grafana/grafanaRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/acm-grafana-rhel8 |
GoRed Hat |
High
|
Fix reported |
|
| Grafana when using email as a username can block other users from signing inCVE-2022-39229 · GHSA-GJ7M-853R-289RVersion ranges need review. |
github.com/grafana/grafanaRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/acm-grafana-rhel8 |
GoRed Hat |
Medium
|
Fix reported |
|
| Grafana Data source and plugin proxy endpoints leaking authentication tokens to some destination pluginsCVE-2022-31130 · GHSA-JV32-5578-PXJCVersion ranges need review. |
github.com/grafana/grafanaRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/acm-grafana-rhel8 |
GoRed Hat |
Medium
|
Fix reported |
|
