OpenShift Serverless/openshift-serverless-1/serving-webhook-rhel8
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| jwt-go allows excessive memory allocation during header parsing | github.com/golang-jwt/jwt/v4github.com/golang-jwt/jwt/v5 | GoRed Hat | High | Fix reported | |
| golang.org/x/oauth2 Improper Validation of Syntactic Correctness of Input vulnerability | golang.org/x/oauth2Cryostat 3/cryostat-tech-preview/cryostat-storage-rhel8 | GoRed Hat | High | Fix reported | |
| cert-manager ha a potential slowdown / DoS when parsing specially crafted PEM inputs | github.com/cert-manager/cert-managerCryostat 3/cryostat-tech-preview/cryostat-rhel8-operator | GoRed Hat | Medium | Fix reported | |
| Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations | github.com/golang-jwt/jwt/v4Builds for Red Hat OpenShift/openshift-builds-triggers-container | GoRed Hat | Low | Fix reported |