Security
فارسی
All products

Red Hat Advanced Cluster Security 3/advanced-cluster-security/rhacs-scanner-slim-rhel8

Red Hat · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
github.com/containers/image allows unexpected authenticated registry accessesCVE-2024-3727 · GHSA-6WVF-F2VW-3425Version ranges need review. github.com/containers/image/v5github.com/containers/image GoRed Hat High Fix reported
Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clientsCVE-2023-49569 · GHSA-449P-3H89-PW88Version ranges need review. github.com/go-git/go-git/v5gopkg.in/src-d/go-git.v4 GoRed Hat Critical Fix reported
Maliciously crafted Git server replies can cause DoS on go-git clientsCVE-2023-49568 · GHSA-MW99-9CHC-XW7RVersion ranges need review. github.com/go-git/go-git/v5gopkg.in/src-d/go-git.v4 GoRed Hat High Fix reported
yaml package for Go can consume excessive amounts of CPU or memoryCVE-2022-3064 · GHSA-6Q6Q-88XP-6F2RVersion ranges need review. gopkg.in/yaml.v2Cryostat 2/cryostat-tech-preview/cryostat-rhel8-operator GoRed Hat High Fix reported
Mishandling of corrupt central directory record in archive/zipCVE-2024-24789 · GO-2024-2888 stdlibCustom Metric Autoscaler operator for Red Hat Openshift/custom-metrics-autoscaler-tech-preview/custom-metrics-autoscaler-rhel8-operator GoRed Hat Medium Fix reported
Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictionsCVE-2022-36109 · GHSA-RC4R-WH2Q-Q6C4Version ranges need review. github.com/docker/dockerMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported