Security
فارسی
All products

Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/grafana-dashboard-loader-rhel8

Red Hat · Package
11 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
golang.org/x/net vulnerable to Cross-site ScriptingCVE-2025-22872 · GHSA-VVGC-356P-C3XWVersion ranges need review. golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 GoRed Hat Medium Fix reported
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/netCVE-2025-22870 · GHSA-QXP5-GWG8-XV66Version ranges need review. golang.org/x/netstdlib GoRed Hat Medium Fix reported
Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situationsCVE-2024-51744 · GHSA-29WX-VH33-7X7RVersion ranges need review. github.com/golang-jwt/jwt/v4Builds for Red Hat OpenShift/openshift-builds-triggers-container GoRed Hat Low Fix reported
x/crypto/ssh vulnerable to panic via malformed packetsCVE-2021-43565 · GHSA-GWC9-M7RH-J2WWVersion ranges need review. golang.org/x/cryptoMigration Toolkit for Containers/rhmtc/openshift-migration-velero-rhel8 GoRed Hat High Fix reported
Incorrect Authorization in NATS nats-serverCVE-2022-24450 · GHSA-G6W6-R76C-28J7Version ranges need review. github.com/nats-io/nats-server/v2github.com/nats-io/nats-server GoRed Hat High Fix reported
Panic due to large inputs affecting P-256 curves in crypto/ellipticCVE-2022-28327 · GO-2022-0435 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Stack overflow from a large amount of PEM data in encoding/pemCVE-2022-24675 · GO-2022-0433 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Session tickets lack random ticket_age_add in crypto/tlsCVE-2022-30629 · GO-2022-0531 stdlibMigration Toolkit for Containers/cpma GoRed Hat Low Fix reported
Grafana API IDORCVE-2022-21713 · GHSA-63G3-9JQ3-MCCV github.com/grafana/grafanaOpenShift Service Mesh 2.0/servicemesh-grafana GoRed Hat Medium Fix reported
Grafana proxy Cross-site ScriptingCVE-2022-21702 · GHSA-XC3P-28HW-Q24G github.com/grafana/grafanaOpenShift Service Mesh 2.0/servicemesh-grafana GoRed Hat Medium Fix reported
Grafana Cross Site Request Forgery (CSRF)CVE-2022-21703 · GHSA-CMF4-H3XC-JW8W github.com/grafana/grafana/pkg/webOpenShift Service Mesh 2.0/servicemesh-grafana GoRed Hat Medium Fix reported