Security
فارسی
All products

Red Hat Openshift Data Foundation 4/mcg

Red Hat · Package
22 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
HTTP/2 rapid reset can cause excessive work in net/httpCVE-2023-39325 · GHSA-4374-P667-P6C8Version ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
Authorization Bypass Through User-Controlled Key in go-restfulCVE-2022-1996 · GHSA-R48Q-9G5R-8Q2HVersion ranges need review. github.com/emicklei/go-restful/v2github.com/emicklei/go-restful/v3 GoRed Hat Critical Fix reported
Incorrect sanitization of forwarded query parameters in net/http/httputilCVE-2022-2880 · GO-2022-1038 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Memory exhaustion when compiling regular expressions in regexp/syntaxCVE-2022-41715 · GO-2022-1039 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Failure to strip relative path components in net/urlCVE-2022-32190 · GO-2022-0988 stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator GoRed Hat Medium Fix reported
Unbounded memory consumption when reading headers in archive/tarCVE-2022-2879 · GO-2022-1037 stdlibOpenShift Developer Tools and Services/helm GoRed Hat Medium Fix reported
Improper sanitization of CSS values in html/templateCVE-2023-24539 · GO-2023-1751 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-rhel8-operator GoRed Hat Medium Fix reported
golang.org/x/net/http2 vulnerable to possible excessive memory growthCVE-2022-41717 · GHSA-XRJJ-MJ9H-534MVersion ranges need review. golang.org/x/net/http2golang.org/x/net GoRed Hat Medium Fix reported
Improper handling of JavaScript whitespace in html/templateCVE-2023-24540 · GO-2023-1752 stdlibCustom Metric Autoscaler operator for Red Hat Openshift/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel8 GoRed Hat High Fix reported
Excessive resource consumption in mime/multipartCVE-2022-41725 · GO-2023-1569 stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator GoRed Hat Medium Fix reported
Panic on large handshake records in crypto/tlsCVE-2022-41724 · GO-2023-1570 stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator GoRed Hat Medium Fix reported
golang.org/x/net/http2 Denial of Service vulnerabilityCVE-2022-27664 · GHSA-69CG-P879-7622Version ranges need review. golang.org/x/net/http2golang.org/x/net GoRed Hat High Fix reported
Improper handling of empty HTML attributes in html/templateCVE-2023-29400 · GO-2023-1753 stdlibOpenShift Developer Tools and Services/helm GoRed Hat Medium Fix reported
Stack exhaustion when compiling deeply nested expressions in regexpCVE-2022-24921 · GO-2021-0347 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Stack exhaustion when unmarshaling certain documents in encoding/xmlCVE-2022-30633 · GO-2022-0523 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Stack exhaustion from deeply nested XML documents in encoding/xmlCVE-2022-28131 · GO-2022-0521 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Stack exhaustion when decoding certain messages in encoding/gobCVE-2022-30635 · GO-2022-0526 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Stack exhaustion on crafted paths in path/filepathCVE-2022-30632 · GO-2022-0522 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Exposure of client IP addresses in net/httpCVE-2022-32148 · GO-2022-0520 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Stack exhaustion due to deeply nested types in go/parserCVE-2022-1962 · GO-2022-0515 stdlibCryostat 2/cryostat-tech-preview/cryostat-rhel8-operator GoRed Hat Medium Fix reported