Security
فارسی
All products

Red Hat OpenShift distributed tracing 2/rhosdt/opentelemetry-rhel8-operator

Red Hat · Package
16 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSONCVE-2024-24786 · GHSA-8R3F-844C-MC37Version ranges need review. google.golang.org/protobuf/encoding/protojsongoogle.golang.org/protobuf/internal/encoding/json GoRed Hat Medium Fix reported
HTTP/2 rapid reset can cause excessive work in net/httpCVE-2023-39325 · GHSA-4374-P667-P6C8Version ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
github.com/go-resty/resty/v2 HTTP request body disclosureCVE-2023-45286 · GHSA-XWH9-GC39-5298Version ranges need review. github.com/go-resty/resty/v2Migration Toolkit for Applications 6/mta/mta-hub-rhel9 GoRed Hat Medium Fix reported
Supplementary groups are not set up properly in github.com/containerd/containerdCVE-2023-25173 · GHSA-HMFX-3PCX-653PVersion ranges need review. github.com/containerd/containerdCryostat 2/cryostat-tech-preview/cryostat-rhel8-operator GoRed Hat Medium Fix reported
Prometheus Exporter-Toolkit is vulnerable to authentication bypassCVE-2022-46146 · GHSA-7RG2-CXVP-9P7PVersion ranges need review. github.com/prometheus/exporter-toolkitRed Hat Enterprise Linux 9/grafana GoRed Hat Medium Fix reported
Uncontrolled Resource Consumption in promhttpCVE-2022-21698 · GHSA-CG3Q-J54F-5P7PVersion ranges need review. github.com/prometheus/client_golangCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat High Fix reported
golang.org/x/net/http2 vulnerable to possible excessive memory growthCVE-2022-41717 · GHSA-XRJJ-MJ9H-534MVersion ranges need review. golang.org/x/net/http2golang.org/x/net GoRed Hat Medium Fix reported
golang.org/x/net vulnerable to Uncontrolled Resource ConsumptionCVE-2022-41723 · GHSA-VVPX-J8F3-3W6HVersion ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
Misdirected I/O in syscallCVE-2021-44717 · GO-2022-0289 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Uncontrolled memory consumption in math/bigCVE-2022-23772 · GO-2021-0317 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Incorrect access control in the go command in cmd/go/internal/modfetchCVE-2022-23773 · GO-2022-0318 toolchainMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Stack exhaustion when compiling deeply nested expressions in regexpCVE-2022-24921 · GO-2021-0347 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Panic due to large inputs affecting P-256 curves in crypto/ellipticCVE-2022-28327 · GO-2022-0435 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Stack overflow from a large amount of PEM data in encoding/pemCVE-2022-24675 · GO-2022-0433 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Stack exhaustion when reading certain archives in compress/gzipCVE-2022-30631 · GO-2022-0524 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
golang.org/x/net/http2 allows uncontrolled memory consumptionCVE-2021-44716 · GHSA-VC3P-29H2-GPCP golang.org/x/net/http2golang.org/x/net GoRed Hat High Fix reported