All products

OpenShift Serverless/openshift-serverless-1/kn-cli-artifacts-rhel8

Red Hat · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/cryptoCVE-2024-45337 · GHSA-V778-237X-GJRCVersion ranges need review. golang.org/x/cryptoBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel8 GoRed Hat Critical Fix reported
go-git clients vulnerable to DoS via maliciously crafted Git server repliesCVE-2025-21614 · GHSA-R9PX-M959-CXF4Version ranges need review. github.com/go-git/go-git/v4github.com/go-git/go-git/v5 GoRed Hat High Fix reported
go-git has an Argument Injection via the URL fieldCVE-2025-21613 · GHSA-V725-9546-7Q7MVersion ranges need review. github.com/go-git/go-git/v4github.com/go-git/go-git/v5 GoRed Hat Critical Fix reported
Non-linear parsing of case-insensitive content in golang.org/x/net/htmlCVE-2024-45338 · GHSA-W32M-9786-JP63 golang.org/x/net/htmlgolang.org/x/net GoRed Hat High Fix reported
Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situationsCVE-2024-51744 · GHSA-29WX-VH33-7X7RVersion ranges need review. github.com/golang-jwt/jwt/v4Builds for Red Hat OpenShift/openshift-builds-triggers-container GoRed Hat Low Fix reported
YAML Go package vulnerable to denial of serviceCVE-2021-4235 · GHSA-R88R-GMRH-7J83Version ranges need review. github.com/go-yaml/yamlgopkg.in/yaml.v2 GoRed Hat Medium Fix reported