All products

Red Hat OpenShift Container Platform 4/openshift4/dpu-network-rhel8-operator

Red Hat · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
HTTP/2 rapid reset can cause excessive work in net/httpCVE-2023-39325 · GHSA-4374-P667-P6C8Version ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
Supplementary groups are not set up properly in github.com/containerd/containerdCVE-2023-25173 · GHSA-HMFX-3PCX-653PVersion ranges need review. github.com/containerd/containerdCryostat 2/cryostat-tech-preview/cryostat-rhel8-operator GoRed Hat Medium Fix reported
Uncontrolled Resource Consumption in promhttpCVE-2022-21698 · GHSA-CG3Q-J54F-5P7PVersion ranges need review. github.com/prometheus/client_golangCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat High Fix reported
OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metricsCVE-2023-45142 · GHSA-RCJV-MGP8-QVMRVersion ranges need review. go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestfulgo.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin GoRed Hat High Fix reported
goproxy Denial of Service vulnerabilityCVE-2023-37788 · GHSA-4R8X-2P26-976PVersion ranges need review. github.com/elazarl/goproxyLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator GoRed Hat High Fix reported
xkeys seal encryption used fixed key for all encryptionCVE-2023-46129 · GHSA-MR45-RX8Q-WCM9Version ranges need review. github.com/nats-io/nats-server/v2github.com/nats-io/nkeys GoRed Hat High Fix reported