All products

Red Hat Software Collections/rh-git227-git-lfs

Red Hat · Package
11 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
golang.org/x/net/http2 vulnerable to possible excessive memory growthCVE-2022-41717 · GHSA-XRJJ-MJ9H-534MVersion ranges need review. golang.org/x/net/http2golang.org/x/net GoRed Hat Medium Fix reported
net/http, x/net/http2: close connections when receiving too many headersCVE-2023-45288 · GHSA-4V7X-PQXF-CX7MVersion ranges need review. golang.org/x/net/http2golang.org/x/net GoRed Hat Medium Fix reported
golang.org/x/net vulnerable to Uncontrolled Resource ConsumptionCVE-2022-41723 · GHSA-VVPX-J8F3-3W6HVersion ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
Session tickets lack random ticket_age_add in crypto/tlsCVE-2022-30629 · GO-2022-0531 stdlibMigration Toolkit for Containers/cpma GoRed Hat Low Fix reported
Stack exhaustion when decoding certain messages in encoding/gobCVE-2022-30635 · GO-2022-0526 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Stack exhaustion on crafted paths in path/filepathCVE-2022-30632 · GO-2022-0522 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Exposure of client IP addresses in net/httpCVE-2022-32148 · GO-2022-0520 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Improper sanitization of Transfer-Encoding headers in net/httpCVE-2022-1705 · GO-2022-0525 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Stack exhaustion in Glob on certain paths in io/fsCVE-2022-30630 · GO-2022-0527 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
golang.org/x/text: Panic in language.ParseAcceptLanguage while processing bcp47 tagCVE-2020-28852 OpenShift Service Mesh 2.0/servicemesh-cniRed Hat Advanced Cluster Management for Kubernetes 2/go Red Hat Medium No fix reported
golang.org/x/text: Panic in language.ParseAcceptLanguage while parsing -u- extensionCVE-2020-28851 Red Hat Advanced Cluster Management for Kubernetes 2/goRed Hat Ceph Storage 2/golang Red Hat Medium No fix reported