Security
فارسی
All products

Red Hat Openshift Sandboxed Containers/openshift-sandboxed-containers/osc-podvm-payload-rhel9

Red Hat · Package
11 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSONCVE-2024-24786 · GHSA-8R3F-844C-MC37Version ranges need review. google.golang.org/protobuf/encoding/protojsongoogle.golang.org/protobuf/internal/encoding/json GoRed Hat Medium Fix reported
HTTP/2 rapid reset can cause excessive work in net/httpCVE-2023-39325 · GHSA-4374-P667-P6C8Version ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
jwt-go allows excessive memory allocation during header parsingCVE-2025-30204 · GHSA-MH63-6H87-95CPVersion ranges need review. github.com/golang-jwt/jwt/v4github.com/golang-jwt/jwt/v5 GoRed Hat High Fix reported
Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/cryptoCVE-2024-45337 · GHSA-V778-237X-GJRCVersion ranges need review. golang.org/x/cryptoBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel8 GoRed Hat Critical Fix reported
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/netCVE-2025-22870 · GHSA-QXP5-GWG8-XV66Version ranges need review. golang.org/x/netstdlib GoRed Hat Medium Fix reported
golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key ExchangeCVE-2025-22869 · GHSA-HCG3-Q754-CR77Version ranges need review. golang.org/x/cryptoAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-reporter-rhel8 GoRed Hat High Fix reported
Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situationsCVE-2024-51744 · GHSA-29WX-VH33-7X7RVersion ranges need review. github.com/golang-jwt/jwt/v4Builds for Red Hat OpenShift/openshift-builds-triggers-container GoRed Hat Low Fix reported
go-retryablehttp can leak basic auth credentials to log filesCVE-2024-6104 · GHSA-V6V8-XJ6M-XWQHVersion ranges need review. github.com/hashicorp/go-retryablehttpOpenShift API for Data Protection/oadp/oadp-kubevirt-velero-plugin-rhel8 GoRed Hat Medium Fix reported
containerd has an integer overflow in User ID handlingCVE-2024-40635 · GHSA-265R-HFXG-FHMGVersion ranges need review. github.com/containerd/containerd/v2github.com/containerd/containerd GoRed Hat Medium Fix reported
Comments in display names are incorrectly handled in net/mailCVE-2024-24784 · GO-2024-2609 stdlibMulticluster Engine for Kubernetes/multicluster-engine/hive-rhel8 GoRed Hat Medium Fix reported
Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/httpCVE-2023-45289 · GO-2024-2600 stdlibBuilds for Red Hat OpenShift/openshift-builds-triggers-container GoRed Hat Medium Fix reported