All products

Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/thanos-receive-controller-rhel8

Red Hat · Package
7 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/netCVE-2025-22870 · GHSA-QXP5-GWG8-XV66Version ranges need review. golang.org/x/netstdlib GoRed Hat Medium Fix reported
x/crypto/ssh vulnerable to panic via malformed packetsCVE-2021-43565 · GHSA-GWC9-M7RH-J2WWVersion ranges need review. golang.org/x/cryptoMigration Toolkit for Containers/rhmtc/openshift-migration-velero-rhel8 GoRed Hat High Fix reported
Incorrect computation for some invalid field elements in crypto/ellipticCVE-2022-23806 · GO-2021-0319 stdlibLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator GoRed Hat Medium Fix reported
Panic due to large inputs affecting P-256 curves in crypto/ellipticCVE-2022-28327 · GO-2022-0435 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Stack overflow from a large amount of PEM data in encoding/pemCVE-2022-24675 · GO-2022-0433 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Session tickets lack random ticket_age_add in crypto/tlsCVE-2022-30629 · GO-2022-0531 stdlibMigration Toolkit for Containers/cpma GoRed Hat Low Fix reported
Gin's default logger allows unsanitized input that can allow remote attackers to inject arbitrary log linesCVE-2020-36567 · GHSA-6VM3-JJ99-7229Version ranges need review. github.com/gin-gonic/ginMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat High Fix reported