| opencontainers runc contains procfs race condition with a shared volume mountCVE-2019-19921 · GHSA-FH74-HM69-RQJWVersion ranges need review. |
github.com/opencontainers/runcRed Hat Enterprise Linux 8/container-tools:1.0/runc |
GoRed Hat |
Medium
|
Fix reported |
|
| github.com/containers/image allows unexpected authenticated registry accessesCVE-2024-3727 · GHSA-6WVF-F2VW-3425Version ranges need review. |
github.com/containers/image/v5github.com/containers/image |
GoRed Hat |
High
|
Fix reported |
|
| Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)CVE-2024-28180 · GHSA-C5Q2-7R4C-MV6GVersion ranges need review. |
github.com/go-jose/go-jose/v3github.com/go-jose/go-jose/v4 |
GoRed Hat |
Medium
|
Fix reported |
|
| Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka TerrapinCVE-2023-48795 · GHSA-45X7-PX36-X8W8Version ranges need review. |
russhgolang.org/x/crypto |
Rust / CargoGoPyPIRed Hat |
Medium
|
Fix reported |
|
| x/crypto/ssh vulnerable to panic via malformed packetsCVE-2021-43565 · GHSA-GWC9-M7RH-J2WWVersion ranges need review. |
golang.org/x/cryptoMigration Toolkit for Containers/rhmtc/openshift-migration-velero-rhel8 |
GoRed Hat |
High
|
Fix reported |
|
| containerd CRI plugin: Insecure handling of image volumesCVE-2022-23648 · GHSA-CRP2-QRR5-8PQ7Version ranges need review. |
github.com/containerd/containerdRed Hat OpenStack Platform 16.2/osp-director-provisioner-container |
GoRed Hat |
High
|
Fix reported |
|
| Insufficiently restricted permissions on plugin directoriesCVE-2021-41103 · GHSA-C2H3-6MXW-7MVQVersion ranges need review. |
github.com/containerd/containerdRed Hat OpenStack Platform 16.2/osp-director-provisioner-container |
GoRed Hat |
Medium
|
Fix reported |
|
| Archive package allows chmod of file outside of unpack target directoryCVE-2021-32760 · GHSA-C72P-9XMJ-RX3WVersion ranges need review. |
github.com/containerd/containerdRed Hat 3scale API Management Platform 2/3scale-amp2/3scale-rhel7-operator |
GoRed Hat |
Medium
|
Fix reported |
|
| XML Entity Expansion and Improper Input Validation in Kubernetes API serverCVE-2019-11253 · GHSA-PMQP-H87C-MR78Version ranges need review. |
k8s.io/kubernetesOpenShift Service Mesh 1/serivicemesh-grafana |
GoRed Hat |
High
|
Fix reported |
|
| Path Traversal in DockerCVE-2014-9356 · GHSA-VJ3F-3286-R4PFVersion ranges need review. |
github.com/docker/dockerRed Hat OpenStack Platform 16.2/osp-director-provisioner-container |
GoRed Hat |
Medium
|
Fix reported |
|
| containerd-shim API Exposed to Host Network ContainersCVE-2020-15257 · GHSA-36XW-FX78-C5R4Version ranges need review. |
github.com/containerd/containerdRed Hat 3scale API Management Platform 2/3scale-amp2/3scale-rhel7-operator |
GoRed Hat |
Medium
|
Fix reported |
|
| Unprivileged pod using `hostPath` can side-step active LSM when it is SELinuxCVE-2021-43816 · GHSA-MVFF-H3CJ-WJ9CVersion ranges need review. |
github.com/containerd/containerdRed Hat Advanced Cluster Management for Kubernetes 2/multicloud-operators-channel-container |
GoRed Hat |
High
|
Fix reported |
|
| github.com/ulikunitz/xz fixes readUvarint Denial of Service (DoS)CVE-2021-29482 · GHSA-25XM-HR59-7C27Version ranges need review. |
github.com/ulikunitz/xzMigration Toolkit for Containers/openshift-migration-plugin-container |
GoRed Hat |
High
|
Fix reported |
|
| pgx SQL Injection via Protocol Message Size OverflowCVE-2024-27304 · GHSA-MRWW-27VC-GGHV |
github.com/jackc/pgx/v4github.com/jackc/pgx/v5 |
GoRed Hat |
High
|
Fix reported |
|
| HashiCorp go-getter unsafe downloads could lead to asymmetric resource exhaustionCVE-2022-30323 · GHSA-28R2-Q6M8-9HPX |
github.com/hashicorp/go-getter/gcs/v2github.com/hashicorp/go-getter/s3/v2 |
GoRed Hat |
High
|
Fix reported |
|
| HashiCorp go-getter unsafe downloads could lead to arbitrary host accessCVE-2022-30322 · GHSA-CJR4-FV6C-F3MV |
github.com/hashicorp/go-getter/gcs/v2github.com/hashicorp/go-getter/s3/v2 |
GoRed Hat |
High
|
Fix reported |
|
| Uncontrolled memory consumption in math/bigCVE-2022-23772 · GO-2021-0317 |
stdlibMigration Toolkit for Containers/cpma |
GoRed Hat |
Medium
|
Fix reported |
|
| Information Disclosure in go.elastic.co/apmCVE-2021-22133 · GHSA-QQC5-RGCC-CJQHVersion ranges need review. |
go.elastic.co/apmRed Hat OpenStack Platform 16.2/osp-director-provisioner-container |
GoRed Hat |
Low
|
Fix reported |
|
| miekg/dns insecurely generates random numbersCVE-2019-19794 · GHSA-44R7-7P62-Q3FRVersion ranges need review. |
github.com/miekg/dnsRed Hat OpenStack Platform 16.2/osp-director-provisioner-container |
GoRed Hat |
Medium
|
Fix reported |
|
| Improper Locking in github.com/containers/storageCVE-2021-20291 · GHSA-7QW8-847F-PGGMVersion ranges need review. |
github.com/containers/storageRed Hat Enterprise Linux 7/buildah |
GoRed Hat |
Medium
|
Fix reported |
|
