Red Hat OpenShift distributed tracing 2/rhosdt/tempo-gateway-rhel8

Red Hat · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSONCVE-2024-24786 · GHSA-8R3F-844C-MC37Version ranges need review.	google.golang.org/protobuf/encoding/protojson google.golang.org/protobuf/internal/encoding/json	GoRed Hat	Medium	Fix reported	2026-10-14
HTTP/2 rapid reset can cause excessive work in net/httpCVE-2023-39325 · GHSA-4374-P667-P6C8Version ranges need review.	golang.org/x/net stdlib	GoRed Hat	High	Fix reported	2026-09-28
Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)CVE-2024-28180 · GHSA-C5Q2-7R4C-MV6GVersion ranges need review.	github.com/go-jose/go-jose/v3 github.com/go-jose/go-jose/v4	GoRed Hat	Medium	Fix reported	2026-09-10
github.com/go-resty/resty/v2 HTTP request body disclosureCVE-2023-45286 · GHSA-XWH9-GC39-5298Version ranges need review.	github.com/go-resty/resty/v2 Migration Toolkit for Applications 6/mta/mta-hub-rhel9	GoRed Hat	Medium	Fix reported	2026-09-10
OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metricsCVE-2023-45142 · GHSA-RCJV-MGP8-QVMRVersion ranges need review.	go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin	GoRed Hat	High	Fix reported	2026-09-10
xkeys seal encryption used fixed key for all encryptionCVE-2023-46129 · GHSA-MR45-RX8Q-WCM9Version ranges need review.	github.com/nats-io/nats-server/v2 github.com/nats-io/nkeys	GoRed Hat	High	Fix reported	2026-02-04
envoy: HTTP/2 CPU exhaustion due to CONTINUATION frame floodCVE-2024-30255	Custom Metric Autoscaler operator for Red Hat Openshift/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel8 Logical Volume Manager Storage/lvms4/topolvm-rhel8	Red Hat	Medium	No fix reported	Not recorded