All products

Red Hat OpenShift Container Platform 3.11/openshift-enterprise-autoheal

Red Hat · Package
11 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
HTTP/2 rapid reset can cause excessive work in net/httpCVE-2023-39325 · GHSA-4374-P667-P6C8Version ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
golang.org/x/text/language Out-of-bounds Read vulnerabilityCVE-2021-38561 · GHSA-PPP9-7JFF-5VJ2Version ranges need review. golang.org/x/textOpenShift Developer Tools and Services/odo GoRed Hat High Fix reported
yaml package for Go can consume excessive amounts of CPU or memoryCVE-2022-3064 · GHSA-6Q6Q-88XP-6F2RVersion ranges need review. gopkg.in/yaml.v2Cryostat 2/cryostat-tech-preview/cryostat-rhel8-operator GoRed Hat High Fix reported
golang.org/x/text/language Denial of service via crafted Accept-Language headerCVE-2022-32149 · GHSA-69CH-W2M2-3VJPVersion ranges need review. golang.org/x/textOpenShift Developer Tools and Services/odo GoRed Hat High Fix reported
Uncontrolled Resource Consumption in promhttpCVE-2022-21698 · GHSA-CG3Q-J54F-5P7PVersion ranges need review. github.com/prometheus/client_golangCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat High Fix reported
net/http, x/net/http2: close connections when receiving too many headersCVE-2023-45288 · GHSA-4V7X-PQXF-CX7MVersion ranges need review. golang.org/x/net/http2golang.org/x/net GoRed Hat Medium Fix reported
golang.org/x/net vulnerable to Uncontrolled Resource ConsumptionCVE-2022-41723 · GHSA-VVPX-J8F3-3W6HVersion ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
Request smuggling due to accepting invalid headers in net/http via net/textprotoCVE-2019-16276 · GO-2022-0212 stdlibRed Hat Ceph Storage 2/golang GoRed Hat Medium Fix reported
Data race and crash in net/httpCVE-2020-15586 · GO-2021-0224 stdlibOpenShift Service Mesh 1/jaeger-operator GoRed Hat Medium Fix reported
Incorrect operations on the P-224 curve in crypto/ellipticCVE-2021-3114 · GO-2021-0235 stdlibOpenShift Serverless/knative-eventing GoRed Hat Medium Fix reported
golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputsCVE-2020-16845 OpenShift Service Mesh 1/jaeger-operatorOpenShift Service Mesh 1/jaeger Red Hat Medium No fix reported