Security
فارسی
All products

Red Hat Storage 3/golang

Red Hat · Package
87 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
HTTP/2 rapid reset can cause excessive work in net/httpCVE-2023-39325 · GHSA-4374-P667-P6C8Version ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
golang.org/x/text/language Denial of service via crafted Accept-Language headerCVE-2022-32149 · GHSA-69CH-W2M2-3VJPVersion ranges need review. golang.org/x/textOpenShift Developer Tools and Services/odo GoRed Hat High Fix reported
golang.org/x/text Infinite loopCVE-2020-14040 · GHSA-5RCV-M4M3-HFH7Version ranges need review. golang.org/x/textOpenShift Developer Tools and Services/jenkins-operator-container GoRed Hat Medium Fix reported
Stack exhaustion in Parse in go/build/constraintCVE-2024-34158 · GO-2024-3107 stdlibMachine Deletion Remediation Operator/workload-availability/machine-deletion-remediation-rhel8-operator GoRed Hat Medium Fix reported
Incorrect sanitization of forwarded query parameters in net/http/httputilCVE-2022-2880 · GO-2022-1038 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Memory exhaustion when compiling regular expressions in regexp/syntaxCVE-2022-41715 · GO-2022-1039 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Failure to strip relative path components in net/urlCVE-2022-32190 · GO-2022-0988 stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator GoRed Hat Medium Fix reported
Unbounded memory consumption when reading headers in archive/tarCVE-2022-2879 · GO-2022-1037 stdlibOpenShift Developer Tools and Services/helm GoRed Hat Medium Fix reported
HTTP/2 Stream Cancellation AttackCVE-2023-44487 · GHSA-QPPJ-FM5R-HXR3 golang.org/x/netcom.typesafe.akka:akka-http-core GoMavenRed HatSwift Medium Fix reported
Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netipCVE-2024-24790 · GO-2024-2887 stdlibBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-waiters-rhel8 GoRed Hat Medium Fix reported
Mishandling of corrupt central directory record in archive/zipCVE-2024-24789 · GO-2024-2888 stdlibCustom Metric Autoscaler operator for Red Hat Openshift/custom-metrics-autoscaler-tech-preview/custom-metrics-autoscaler-rhel8-operator GoRed Hat Medium Fix reported
Stack exhaustion in all Parse functions in go/parserCVE-2024-34155 · GO-2024-3105 stdlibBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-waiters-rhel8 GoRed Hat Medium Fix reported
Stack exhaustion in Decoder.Decode in encoding/gobCVE-2024-34156 · GO-2024-3106 stdlibBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-waiters-rhel8 GoRed Hat High Fix reported
Excessive memory allocation in net/http and net/textprotoCVE-2023-24534 · GO-2023-1704 stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator GoRed Hat Medium Fix reported
Comments in display names are incorrectly handled in net/mailCVE-2024-24784 · GO-2024-2609 stdlibMulticluster Engine for Kubernetes/multicluster-engine/hive-rhel8 GoRed Hat Medium Fix reported
Improper sanitization of CSS values in html/templateCVE-2023-24539 · GO-2023-1751 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-rhel8-operator GoRed Hat Medium Fix reported
Insufficient sanitization of Host header in net/httpCVE-2023-29406 · GO-2023-1878 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-rhv-populator-rhel8 GoRed Hat Medium Fix reported
Code injection via go command with cgo in cmd/goCVE-2023-29402 · GO-2023-1839 toolchainRed Hat Ceph Storage 3/golang GoRed Hat Medium Fix reported
golang.org/x/net/http2 vulnerable to possible excessive memory growthCVE-2022-41717 · GHSA-XRJJ-MJ9H-534MVersion ranges need review. golang.org/x/net/http2golang.org/x/net GoRed Hat Medium Fix reported
Improper handling of HTML-like comments in script contexts in html/templateCVE-2023-39318 · GO-2023-2041 stdlibCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat Medium Fix reported