Red Hat OpenShift Container Platform 3.11/openshift-external-storage

Red Hat · Package

8 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)CVE-2024-28180 · GHSA-C5Q2-7R4C-MV6GVersion ranges need review.	github.com/go-jose/go-jose/v3 github.com/go-jose/go-jose/v4	GoRed Hat	Medium	Fix reported	2026-09-10
Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka TerrapinCVE-2023-48795 · GHSA-45X7-PX36-X8W8Version ranges need review.	russh golang.org/x/crypto	Rust / CargoGoPyPIRed Hat	Medium	Fix reported	2026-09-10
golang.org/x/crypto/ssh NULL Pointer Dereference vulnerabilityCVE-2020-29652 · GHSA-3VM4-22FP-5RFMVersion ranges need review.	golang.org/x/crypto OpenShift Service Mesh 2.0/3scale-istio-adapter-rhel8-container	GoRed Hat	High	Fix reported	2026-09-10
net/http, x/net/http2: close connections when receiving too many headersCVE-2023-45288 · GHSA-4V7X-PQXF-CX7MVersion ranges need review.	golang.org/x/net/http2 golang.org/x/net	GoRed Hat	Medium	Fix reported	2026-02-04
Request smuggling due to accepting invalid headers in net/http via net/textprotoCVE-2019-16276 · GO-2022-0212	stdlib Red Hat Ceph Storage 2/golang	GoRed Hat	Medium	Fix reported	2024-05-20
Data race and crash in net/httpCVE-2020-15586 · GO-2021-0224	stdlib OpenShift Service Mesh 1/jaeger-operator	GoRed Hat	Medium	Fix reported	2024-05-20
Incorrect operations on the P-224 curve in crypto/ellipticCVE-2021-3114 · GO-2021-0235	stdlib OpenShift Serverless/knative-eventing	GoRed Hat	Medium	Fix reported	2024-05-20
golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputsCVE-2020-16845	OpenShift Service Mesh 1/jaeger-operator OpenShift Service Mesh 1/jaeger	Red Hat	Medium	No fix reported	Not recorded