Security
فارسی
All products

OpenShift Serverless/knative-serving

Red Hat · Package
17 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
HTTP/2 rapid reset can cause excessive work in net/httpCVE-2023-39325 · GHSA-4374-P667-P6C8Version ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
CBC padding oracle issue in AWS S3 Crypto SDK for golangCVE-2020-8911 · GHSA-F5PG-7WFW-84Q9Version ranges need review. github.com/aws/aws-sdk-goA-MQ Interconnect 1/amq-cert-manager-container GoRed Hat Medium Fix reported
In-band key negotiation issue in AWS S3 Crypto SDK for golangCVE-2020-8912 · GHSA-7F33-F4F5-XWGWVersion ranges need review. github.com/aws/aws-sdk-goA-MQ Interconnect 1/amq-cert-manager-container GoRed Hat Low Fix reported
golang.org/x/net/http2/h2c vulnerable to request smuggling attackCVE-2022-41721 · GHSA-FXG5-WQ6X-VR4WVersion ranges need review. golang.org/x/netOpenShift Serverless/cli GoRed Hat High Fix reported
golang.org/x/net/http2 vulnerable to possible excessive memory growthCVE-2022-41717 · GHSA-XRJJ-MJ9H-534MVersion ranges need review. golang.org/x/net/http2golang.org/x/net GoRed Hat Medium Fix reported
golang.org/x/net vulnerable to Uncontrolled Resource ConsumptionCVE-2022-41723 · GHSA-VVPX-J8F3-3W6HVersion ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
Excessive resource consumption in mime/multipartCVE-2022-41725 · GO-2023-1569 stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator GoRed Hat Medium Fix reported
Arbitrary code execution via the go command with cgo in cmd/goCVE-2020-28367 · GO-2022-0476 toolchainOpenShift Serverless/knative-serving GoRed Hat Medium Fix reported
Panic during division of very large numbers in math/bigCVE-2020-28362 · GO-2021-0069 stdlibOpenShift Serverless/knative-serving GoRed Hat Medium Fix reported
Arbitrary code injection via the go command with cgo on Windows in cmd/goCVE-2021-3115 · GO-2021-0068 toolchainOpenShift Serverless/knative-eventing GoRed Hat Medium Fix reported
Infinite loop when decoding inputs in encoding/xmlCVE-2021-27918 · GO-2021-0234 stdlibDistributed Tracing Jaeger 1/distributed-tracing/jaeger-all-in-one-rhel8 GoRed Hat Medium Fix reported
Attacker can drop certain headers in net/http/httputilCVE-2021-33197 · GO-2021-0241 stdlibOpenShift Serverless/knative-serving GoRed Hat Medium Fix reported
Panic due to crafted inputs in archive/zipCVE-2021-39293 · GO-2022-0273 stdlibOpenShift Serverless/knative-eventing GoRed Hat Medium Fix reported
Buffer overflow in WASM modules in misc/wasm and cmd/linkCVE-2021-38297 · GO-2022-0247 toolchainOpenShift Serverless/knative-eventing GoRed Hat Medium Fix reported
Panic due to large inputs affecting P-256 curves in crypto/ellipticCVE-2022-28327 · GO-2022-0435 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Stack overflow from a large amount of PEM data in encoding/pemCVE-2022-24675 · GO-2022-0433 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
golang.org/x/net/http2 allows uncontrolled memory consumptionCVE-2021-44716 · GHSA-VC3P-29H2-GPCP golang.org/x/net/http2golang.org/x/net GoRed Hat High Fix reported