All products

Red Hat OpenShift Data Science (RHODS)/rhods/odh-notebook-controller-rhel8

Red Hat · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
HTTP/2 rapid reset can cause excessive work in net/httpCVE-2023-39325 · GHSA-4374-P667-P6C8Version ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metricsCVE-2023-45142 · GHSA-RCJV-MGP8-QVMRVersion ranges need review. go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestfulgo.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin GoRed Hat High Fix reported
goproxy Denial of Service vulnerabilityCVE-2023-37788 · GHSA-4R8X-2P26-976PVersion ranges need review. github.com/elazarl/goproxyLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator GoRed Hat High Fix reported
golang.org/x/net vulnerable to Uncontrolled Resource ConsumptionCVE-2022-41723 · GHSA-VVPX-J8F3-3W6HVersion ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
kubeflow: Reflected XSS in /pipelines/artifacts/getCVE-2023-6571 Red Hat OpenShift Data Science (RHODS)/rhods/odh-kf-notebook-controller-rhel8Red Hat OpenShift Data Science (RHODS)/rhods/odh-ml-pipelines-api-server-rhel8 Red Hat Medium No fix reported
kubeflow: SSRFCVE-2023-6570 Red Hat OpenShift Data Science (RHODS)/rhods/odh-kf-notebook-controller-rhel8Red Hat OpenShift Data Science (RHODS)/rhods/odh-ml-pipelines-api-server-rhel8 Red Hat Medium No fix reported