Security
فارسی
All products

Cost Management Metrics Operator/costmanagement-metrics-operator-container

Red Hat · Package
14 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
HTTP/2 rapid reset can cause excessive work in net/httpCVE-2023-39325 · GHSA-4374-P667-P6C8Version ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
Uncontrolled Resource Consumption in promhttpCVE-2022-21698 · GHSA-CG3Q-J54F-5P7PVersion ranges need review. github.com/prometheus/client_golangCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat High Fix reported
HTTP/2 Stream Cancellation AttackCVE-2023-44487 · GHSA-QPPJ-FM5R-HXR3 golang.org/x/netcom.typesafe.akka:akka-http-core GoMavenRed HatSwift Medium Fix reported
Improper handling of HTML-like comments in script contexts in html/templateCVE-2023-39318 · GO-2023-2041 stdlibCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat Medium Fix reported
Improper handling of special tags within script contexts in html/templateCVE-2023-39319 · GO-2023-2043 stdlibCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat Medium Fix reported
net/http, x/net/http2: close connections when receiving too many headersCVE-2023-45288 · GHSA-4V7X-PQXF-CX7MVersion ranges need review. golang.org/x/net/http2golang.org/x/net GoRed Hat Medium Fix reported
Memory exhaustion in QUIC connection handling in crypto/tlsCVE-2023-39322 · GO-2023-2045 stdlibCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat Medium Fix reported
Denial of service due to improper 100-continue handling in net/httpCVE-2024-24791 · GO-2024-2963 stdlibBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-waiters-rhel8 GoRed Hat Medium Fix reported
Denial of service via chunk extensions in net/httpCVE-2023-39326 · GO-2023-2382 stdlibBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-waiters-rhel8 GoRed Hat Medium Fix reported
Verify panics on certificates with an unknown public key algorithm in crypto/x509CVE-2024-24783 · GO-2024-2598 stdlibCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat Medium Fix reported
Errors returned from JSON marshaling may break template escaping in html/templateCVE-2024-24785 · GO-2024-2610 stdlibCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat Medium Fix reported
Malformed DNS message can cause infinite loop in netCVE-2024-24788 · GO-2024-2824 stdlibCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat Medium Fix reported
Panic when processing post-handshake message on QUIC connections in crypto/tlsCVE-2023-39321 · GO-2023-2044 stdlibCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat Medium Fix reported
Memory exhaustion in multipart form parsing in net/textproto and net/httpCVE-2023-45290 · GO-2024-2599 stdlibCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat Medium Fix reported