Security
فارسی
All products

Red Hat OpenShift Container Platform 3.11/atomic-openshift-service-idler

Red Hat · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
HTTP/2 rapid reset can cause excessive work in net/httpCVE-2023-39325 · GHSA-4374-P667-P6C8Version ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
Improper rendering of text nodes in golang.org/x/net/htmlCVE-2023-3978 · GHSA-2WRH-6PVC-2JM9Version ranges need review. golang.org/x/netOpenShift API for Data Protection/oadp/oadp-rhel8-operator GoRed Hat Medium Fix reported
golang.org/x/text/language Out-of-bounds Read vulnerabilityCVE-2021-38561 · GHSA-PPP9-7JFF-5VJ2Version ranges need review. golang.org/x/textOpenShift Developer Tools and Services/odo GoRed Hat High Fix reported
Authorization Bypass Through User-Controlled Key in go-restfulCVE-2022-1996 · GHSA-R48Q-9G5R-8Q2HVersion ranges need review. github.com/emicklei/go-restful/v2github.com/emicklei/go-restful/v3 GoRed Hat Critical Fix reported
yaml package for Go can consume excessive amounts of CPU or memoryCVE-2022-3064 · GHSA-6Q6Q-88XP-6F2RVersion ranges need review. gopkg.in/yaml.v2Cryostat 2/cryostat-tech-preview/cryostat-rhel8-operator GoRed Hat High Fix reported
golang.org/x/text/language Denial of service via crafted Accept-Language headerCVE-2022-32149 · GHSA-69CH-W2M2-3VJPVersion ranges need review. golang.org/x/textOpenShift Developer Tools and Services/odo GoRed Hat High Fix reported
golang.org/x/crypto/ssh NULL Pointer Dereference vulnerabilityCVE-2020-29652 · GHSA-3VM4-22FP-5RFMVersion ranges need review. golang.org/x/cryptoOpenShift Service Mesh 2.0/3scale-istio-adapter-rhel8-container GoRed Hat High Fix reported
Authorization bypass in github.com/dgrijalva/jwt-goCVE-2020-26160 · GHSA-W73W-5M7G-F7QCVersion ranges need review. github.com/dgrijalva/jwt-go/v4github.com/dgrijalva/jwt-go GoRed Hat High Fix reported
net/http, x/net/http2: close connections when receiving too many headersCVE-2023-45288 · GHSA-4V7X-PQXF-CX7MVersion ranges need review. golang.org/x/net/http2golang.org/x/net GoRed Hat Medium Fix reported
golang.org/x/net vulnerable to Uncontrolled Resource ConsumptionCVE-2022-41723 · GHSA-VVPX-J8F3-3W6HVersion ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
Request smuggling due to accepting invalid headers in net/http via net/textprotoCVE-2019-16276 · GO-2022-0212 stdlibRed Hat Ceph Storage 2/golang GoRed Hat Medium Fix reported
Data race and crash in net/httpCVE-2020-15586 · GO-2021-0224 stdlibOpenShift Service Mesh 1/jaeger-operator GoRed Hat Medium Fix reported
golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputsCVE-2020-16845 OpenShift Service Mesh 1/jaeger-operatorOpenShift Service Mesh 1/jaeger Red Hat Medium No fix reported