Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat OpenShift Data Science (RHODS)/rhods/odh-mm-rest-proxy-rhel8
Red Hat
· Package
19 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSON
CVE-2024-24786 · GHSA-8R3F-844C-MC37
Version ranges need review.
google.golang.org/protobuf/encoding/protojson
google.golang.org/protobuf/internal/encoding/json
Go
Red Hat
Medium
Fix reported
2026-10-14
HTTP/2 rapid reset can cause excessive work in net/http
CVE-2023-39325 · GHSA-4374-P667-P6C8
Version ranges need review.
golang.org/x/net
stdlib
Go
Red Hat
High
Fix reported
2026-09-28
goproxy Denial of Service vulnerability
CVE-2023-37788 · GHSA-4R8X-2P26-976P
Version ranges need review.
github.com/elazarl/goproxy
Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator
Go
Red Hat
High
Fix reported
2026-08-07
Improper sanitization of CSS values in html/template
CVE-2023-24539 · GO-2023-1751
stdlib
Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-rhel8-operator
Go
Red Hat
Medium
Fix reported
2026-02-04
Insufficient sanitization of Host header in net/http
CVE-2023-29406 · GO-2023-1878
stdlib
Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-rhv-populator-rhel8
Go
Red Hat
Medium
Fix reported
2026-02-04
Improper handling of HTML-like comments in script contexts in html/template
CVE-2023-39318 · GO-2023-2041
stdlib
Cost Management Metrics Operator/costmanagement-metrics-operator-container
Go
Red Hat
Medium
Fix reported
2026-02-04
Improper handling of special tags within script contexts in html/template
CVE-2023-39319 · GO-2023-2043
stdlib
Cost Management Metrics Operator/costmanagement-metrics-operator-container
Go
Red Hat
Medium
Fix reported
2026-02-04
Large RSA keys can cause high CPU usage in crypto/tls
CVE-2023-29409 · GO-2023-1987
stdlib
Node Maintenance Operator/workload-availability/node-maintenance-rhel8-operator
Go
Red Hat
Medium
Fix reported
2026-02-04
Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel
CVE-2023-45287 · GO-2023-2375
stdlib
Cryostat 2/cryostat-tech-preview/cryostat-rhel8-operator
Go
Red Hat
Medium
Fix reported
2026-02-04
Improper handling of JavaScript whitespace in html/template
CVE-2023-24540 · GO-2023-1752
stdlib
Custom Metric Autoscaler operator for Red Hat Openshift/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel8
Go
Red Hat
High
Fix reported
2026-02-04
Memory exhaustion in QUIC connection handling in crypto/tls
CVE-2023-39322 · GO-2023-2045
stdlib
Cost Management Metrics Operator/costmanagement-metrics-operator-container
Go
Red Hat
Medium
Fix reported
2026-02-04
golang.org/x/net vulnerable to Uncontrolled Resource Consumption
CVE-2022-41723 · GHSA-VVPX-J8F3-3W6H
Version ranges need review.
golang.org/x/net
stdlib
Go
Red Hat
High
Fix reported
2026-02-04
Denial of service via chunk extensions in net/http
CVE-2023-39326 · GO-2023-2382
stdlib
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-waiters-rhel8
Go
Red Hat
Medium
Fix reported
2026-02-04
Excessive resource consumption in mime/multipart
CVE-2022-41725 · GO-2023-1569
stdlib
Node HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator
Go
Red Hat
Medium
Fix reported
2026-02-04
Panic on large handshake records in crypto/tls
CVE-2022-41724 · GO-2023-1570
stdlib
Node HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator
Go
Red Hat
Medium
Fix reported
2026-02-04
Incorrect calculation on P256 curves in crypto/internal/nistec
CVE-2023-24532 · GO-2023-1621
stdlib
Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-rhv-populator-rhel8
Go
Red Hat
Medium
Fix reported
2026-02-04
Panic when processing post-handshake message on QUIC connections in crypto/tls
CVE-2023-39321 · GO-2023-2044
stdlib
Cost Management Metrics Operator/costmanagement-metrics-operator-container
Go
Red Hat
Medium
Fix reported
2026-02-04
Improper handling of empty HTML attributes in html/template
CVE-2023-29400 · GO-2023-1753
stdlib
OpenShift Developer Tools and Services/helm
Go
Red Hat
Medium
Fix reported
2026-02-04
Stack exhaustion due to deeply nested types in go/parser
CVE-2022-1962 · GO-2022-0515
stdlib
Cryostat 2/cryostat-tech-preview/cryostat-rhel8-operator
Go
Red Hat
Medium
Fix reported
2024-05-20
