| golang.org/x/text/language Out-of-bounds Read vulnerabilityCVE-2021-38561 · GHSA-PPP9-7JFF-5VJ2Version ranges need review. |
golang.org/x/textOpenShift Developer Tools and Services/odo |
GoRed Hat |
High
|
Fix reported |
|
| gopkg.in/yaml.v3 Denial of ServiceCVE-2022-28948 · GHSA-HP87-P4GW-J4GQVersion ranges need review. |
gopkg.in/yaml.v3Red Hat Openshift Container Storage 4/ocs4/cephcsi-rhel8 |
GoRed Hat |
High
|
Fix reported |
|
| HashiCorp Vault Improper Input Validation vulnerabilityCVE-2023-4680 · GHSA-V84F-6R39-CPFCVersion ranges need review. |
github.com/hashicorp/vaultRed Hat Openshift Container Storage 4/ocs4/cephcsi-rhel8 |
GoRed Hat |
Medium
|
Fix reported |
|
| Hashicorp Vault vulnerable to denial of service through memory exhaustionCVE-2024-8185 · GHSA-G233-2P4R-3Q7VVersion ranges need review. |
github.com/hashicorp/vaultgithub.com/openbao/openbao |
GoRed Hat |
High
|
Fix reported |
|
| Vault Community Edition privilege escalation vulnerabilityCVE-2024-9180 · GHSA-RR8J-7W34-XP5JVersion ranges need review. |
github.com/hashicorp/vaultgithub.com/openbao/openbao |
GoRed Hat |
High
|
Fix reported |
|
| pgx SQL Injection via Protocol Message Size OverflowCVE-2024-27304 · GHSA-MRWW-27VC-GGHV |
github.com/jackc/pgx/v4github.com/jackc/pgx/v5 |
GoRed Hat |
High
|
Fix reported |
|
| containernetworking/cni improper limitation of path nameCVE-2021-20206 · GHSA-XJQR-G762-PXWPVersion ranges need review. |
github.com/containernetworking/cniOpenShift Service Mesh 2.0/servicemesh-cni |
GoRed Hat |
High
|
Fix reported |
|
| NATS Server and Streaming Server fails to enforce negative user permissions, may allow denied subjectsCVE-2022-29946 · GHSA-2H2X-8HH2-MFQ8Version ranges need review. |
github.com/nats-io/nats-server/v2github.com/nats-io/nats-server |
GoRed Hat |
High
|
Fix reported |
|
| Token leases could outlive their TTL in HashiCorp VaultCVE-2020-25816 · GHSA-57GG-CJ55-Q5G2Version ranges need review. |
github.com/hashicorp/vaultRed Hat Openshift Container Storage 4/ocs4/cephcsi-rhel8 |
GoRed Hat |
Critical
|
Fix reported |
|
| HashiCorp Vault Improper Privilege ManagementCVE-2020-10661 · GHSA-J6VV-VV26-RH7CVersion ranges need review. |
github.com/hashicorp/vaultRed Hat Openshift Container Storage 4/ocs4/cephcsi-rhel8 |
GoRed Hat |
Critical
|
Fix reported |
|
| HashiCorp Vault Improper Privilege ManagementCVE-2020-10660 · GHSA-M979-W9WJ-QFJ9Version ranges need review. |
github.com/hashicorp/vaultRed Hat Openshift Container Storage 4/ocs4/cephcsi-rhel8 |
GoRed Hat |
Medium
|
Fix reported |
|
| Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions CVE-2024-6468 · GHSA-2QMW-PVF7-4MW6Version ranges need review. |
github.com/hashicorp/vaultRed Hat Openshift Container Storage 4/ocs4/cephcsi-rhel8 |
GoRed Hat |
High
|
Fix reported |
|
| Panic during division of very large numbers in math/bigCVE-2020-28362 · GO-2021-0069 |
stdlibOpenShift Serverless/knative-serving |
GoRed Hat |
Medium
|
Fix reported |
|
| Panic on inputs with large exponents in math/bigCVE-2021-33198 · GO-2021-0242 |
stdlibOpenShift Serverless/knative-eventing |
GoRed Hat |
Medium
|
Fix reported |
|
| Improper sanitization when resolving values from DNS in netCVE-2021-33195 · GO-2021-0239 |
stdlibMigration Toolkit for Containers/rhmtc/openshift-migration-controller-rhel8 |
GoRed Hat |
Medium
|
Fix reported |
|
| Attacker can drop certain headers in net/http/httputilCVE-2021-33197 · GO-2021-0241 |
stdlibOpenShift Serverless/knative-serving |
GoRed Hat |
Medium
|
Fix reported |
|
| Panic on certain certificates in crypto/tlsCVE-2021-34558 · GO-2021-0243 |
stdlibOpenShift Pipelines/golang |
GoRed Hat |
Medium
|
Fix reported |
|
| Apache Cassandra vulnerable to Code Injection due to unsafe configurationCVE-2021-44521 · GHSA-8FFC-79XG-29W8 |
org.apache.cassandra:cassandra-allRed Hat Fuse 7/cassandra |
MavenRed Hat |
Critical
|
Fix reported |
|
| vault: API Endpoint Allowed Enumeration of Secrets Engine Mount Paths Without AuthenticationCVE-2020-25594 |
Red Hat Openshift Container Storage 4/ocs4/cephcsi-rhel8Red Hat Openshift Container Storage 4/ocs4/mcg-rhel8-operator |
Red Hat |
Medium
|
No fix reported |
|
| vault: API Endpoint Exposed Internal IP Address Without AuthenticationCVE-2021-3024 |
Red Hat Openshift Container Storage 4/ocs4/cephcsi-rhel8Red Hat Openshift Container Storage 4/ocs4/mcg-rhel8-operator |
Red Hat |
Medium
|
No fix reported |
|
