All products

Red Hat OpenShift distributed tracing 2/rhosdt/jaeger-ingester-rhel8

Red Hat · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
HTTP/2 rapid reset can cause excessive work in net/httpCVE-2023-39325 · GHSA-4374-P667-P6C8Version ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
browserify-sign upper bound check issue in `dsaVerify` leads to a signature forgery attackCVE-2023-46234 · GHSA-X9W5-V3Q2-3RHW browserify-signOpenShift Pipelines/openshift-pipelines/pipelines-hub-api-rhel8 npmRed Hat High Fix reported
OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metricsCVE-2023-45142 · GHSA-RCJV-MGP8-QVMRVersion ranges need review. go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestfulgo.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin GoRed Hat High Fix reported
Exposure of Sensitive Information to an Unauthorized Actor in follow-redirectsCVE-2022-0536 · GHSA-PW2R-VQ6V-HR8C follow-redirects.NET Core 3.1 on Red Hat Enterprise Linux/rh-dotnet31-dotnet npmRed Hat Medium Fix reported
Improper Verification of Cryptographic Signature in node-forgeCVE-2022-24772 · GHSA-X4JG-MJRX-434G node-forgeMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed Hat High Fix reported
Improper Verification of Cryptographic Signature in node-forgeCVE-2022-24771 · GHSA-CFM4-QJH2-4765 node-forgeMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed Hat High Fix reported
node-fetch forwards secure headers to untrusted sitesCVE-2022-0235 · GHSA-R683-J2X4-V87G node-fetch.NET Core 3.1 on Red Hat Enterprise Linux/rh-dotnet31-dotnet npmRed Hat High Fix reported
Improper Verification of Cryptographic Signature in `node-forge`CVE-2022-24773 · GHSA-2R2C-G63R-VCCR node-forgeMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed Hat Medium Fix reported
Hostname confusion in parse-urlCVE-2022-0722 · GHSA-4P35-CFCX-8653 parse-urlRed Hat Integration Camel K 1/parse-url npmRed Hat High Fix reported