Security
فارسی
All products

Red Hat Storage 3/rhgs3/rhgs-gluster-block-prov-rhel7

Red Hat · Package
23 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
golang.org/x/oauth2 Improper Validation of Syntactic Correctness of Input vulnerabilityCVE-2025-22868 · GHSA-6V2P-P543-PHR9Version ranges need review. golang.org/x/oauth2Cryostat 3/cryostat-tech-preview/cryostat-storage-rhel8 GoRed Hat High Fix reported
Node Denial of Service via kubelet Checkpoint APICVE-2025-0426 · GHSA-JGFP-53C3-624WVersion ranges need review. k8s.io/kubernetesBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-shared-resource-rhel9 GoRed Hat Medium Fix reported
Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)CVE-2024-28180 · GHSA-C5Q2-7R4C-MV6GVersion ranges need review. github.com/go-jose/go-jose/v3github.com/go-jose/go-jose/v4 GoRed Hat Medium Fix reported
Kubernetes client-go vulnerable to Sensitive Information Leak via Log FileCVE-2020-8565 · GHSA-8CFG-VX93-JVXWVersion ranges need review. k8s.io/client-gok8s.io/kubernetes GoRed Hat Medium Fix reported
golang.org/x/text/language Out-of-bounds Read vulnerabilityCVE-2021-38561 · GHSA-PPP9-7JFF-5VJ2Version ranges need review. golang.org/x/textOpenShift Developer Tools and Services/odo GoRed Hat High Fix reported
yaml package for Go can consume excessive amounts of CPU or memoryCVE-2022-3064 · GHSA-6Q6Q-88XP-6F2RVersion ranges need review. gopkg.in/yaml.v2Cryostat 2/cryostat-tech-preview/cryostat-rhel8-operator GoRed Hat High Fix reported
x/crypto/ssh vulnerable to panic via malformed packetsCVE-2021-43565 · GHSA-GWC9-M7RH-J2WWVersion ranges need review. golang.org/x/cryptoMigration Toolkit for Containers/rhmtc/openshift-migration-velero-rhel8 GoRed Hat High Fix reported
golang.org/x/text Infinite loopCVE-2020-14040 · GHSA-5RCV-M4M3-HFH7Version ranges need review. golang.org/x/textOpenShift Developer Tools and Services/jenkins-operator-container GoRed Hat Medium Fix reported
golang.org/x/net vulnerable to Uncontrolled Resource ConsumptionCVE-2022-41723 · GHSA-VVPX-J8F3-3W6HVersion ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
Data race and crash in net/httpCVE-2020-15586 · GO-2021-0224 stdlibOpenShift Service Mesh 1/jaeger-operator GoRed Hat Medium Fix reported
Panic on inputs with large exponents in math/bigCVE-2021-33198 · GO-2021-0242 stdlibOpenShift Serverless/knative-eventing GoRed Hat Medium Fix reported
Improper sanitization when resolving values from DNS in netCVE-2021-33195 · GO-2021-0239 stdlibMigration Toolkit for Containers/rhmtc/openshift-migration-controller-rhel8 GoRed Hat Medium Fix reported
Attacker can drop certain headers in net/http/httputilCVE-2021-33197 · GO-2021-0241 stdlibOpenShift Serverless/knative-serving GoRed Hat Medium Fix reported
Panic on certain certificates in crypto/tlsCVE-2021-34558 · GO-2021-0243 stdlibOpenShift Pipelines/golang GoRed Hat Medium Fix reported
Panic in ReverseProxy in net/http/httputilCVE-2021-36221 · GO-2021-0245 stdlibOpenShift Serverless/knative-eventing GoRed Hat Medium Fix reported
Misdirected I/O in syscallCVE-2021-44717 · GO-2022-0289 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Stack exhaustion when compiling deeply nested expressions in regexpCVE-2022-24921 · GO-2021-0347 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Stack overflow from a large amount of PEM data in encoding/pemCVE-2022-24675 · GO-2022-0433 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
golang.org/x/net/http2 allows uncontrolled memory consumptionCVE-2021-44716 · GHSA-VC3P-29H2-GPCP golang.org/x/net/http2golang.org/x/net GoRed Hat High Fix reported
golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputsCVE-2020-16845 OpenShift Service Mesh 1/jaeger-operatorOpenShift Service Mesh 1/jaeger Red Hat Medium No fix reported