All products

Red Hat OpenShift Data Science (RHODS)/rhods/odh-ml-pipelines-scheduledworkflow-rhel8

Red Hat · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situationsCVE-2024-51744 · GHSA-29WX-VH33-7X7RVersion ranges need review. github.com/golang-jwt/jwt/v4Builds for Red Hat OpenShift/openshift-builds-triggers-container GoRed Hat Low Fix reported
Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clientsCVE-2023-49569 · GHSA-449P-3H89-PW88Version ranges need review. github.com/go-git/go-git/v5gopkg.in/src-d/go-git.v4 GoRed Hat Critical Fix reported
urllib3's request body not stripped after redirect from 303 status changes request method to GETCVE-2023-45803 · GHSA-G4MX-Q9VG-27P4Version ranges need review. urllib3Red Hat Certification for Red Hat Enterprise Linux 8/redhat-certification-baremetal-container PyPIRed Hat Medium Fix reported
Maliciously crafted Git server replies can cause DoS on go-git clientsCVE-2023-49568 · GHSA-MW99-9CHC-XW7RVersion ranges need review. github.com/go-git/go-git/v5gopkg.in/src-d/go-git.v4 GoRed Hat High Fix reported
OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metricsCVE-2023-45142 · GHSA-RCJV-MGP8-QVMRVersion ranges need review. go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestfulgo.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin GoRed Hat High Fix reported
`Cookie` HTTP header isn't stripped on cross-origin redirectsCVE-2023-43804 · GHSA-V845-JXX5-VC9FVersion ranges need review. urllib3Red Hat Certification for Red Hat Enterprise Linux 8/redhat-certification-baremetal-container PyPIRed Hat High Fix reported
pgx SQL Injection via Protocol Message Size OverflowCVE-2024-27304 · GHSA-MRWW-27VC-GGHV github.com/jackc/pgx/v4github.com/jackc/pgx/v5 GoRed Hat High Fix reported
kubeflow: Reflected XSS in /pipelines/artifacts/getCVE-2023-6571 Red Hat OpenShift Data Science (RHODS)/rhods/odh-kf-notebook-controller-rhel8Red Hat OpenShift Data Science (RHODS)/rhods/odh-ml-pipelines-api-server-rhel8 Red Hat Medium No fix reported
kubeflow: SSRFCVE-2023-6570 Red Hat OpenShift Data Science (RHODS)/rhods/odh-kf-notebook-controller-rhel8Red Hat OpenShift Data Science (RHODS)/rhods/odh-ml-pipelines-api-server-rhel8 Red Hat Medium No fix reported