Security
فارسی
All products

Red Hat Ansible Automation Platform 2/openshift-clients

Red Hat · Package
21 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Improper rendering of text nodes in golang.org/x/net/htmlCVE-2023-3978 · GHSA-2WRH-6PVC-2JM9Version ranges need review. golang.org/x/netOpenShift API for Data Protection/oadp/oadp-rhel8-operator GoRed Hat Medium Fix reported
YAML Go package vulnerable to denial of serviceCVE-2021-4235 · GHSA-R88R-GMRH-7J83Version ranges need review. github.com/go-yaml/yamlgopkg.in/yaml.v2 GoRed Hat Medium Fix reported
Authorization Bypass Through User-Controlled Key in go-restfulCVE-2022-1996 · GHSA-R48Q-9G5R-8Q2HVersion ranges need review. github.com/emicklei/go-restful/v2github.com/emicklei/go-restful/v3 GoRed Hat Critical Fix reported
Incorrect sanitization of forwarded query parameters in net/http/httputilCVE-2022-2880 · GO-2022-1038 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Memory exhaustion when compiling regular expressions in regexp/syntaxCVE-2022-41715 · GO-2022-1039 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Failure to strip relative path components in net/urlCVE-2022-32190 · GO-2022-0988 stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator GoRed Hat Medium Fix reported
Unbounded memory consumption when reading headers in archive/tarCVE-2022-2879 · GO-2022-1037 stdlibOpenShift Developer Tools and Services/helm GoRed Hat Medium Fix reported
golang.org/x/net vulnerable to Uncontrolled Resource ConsumptionCVE-2022-41723 · GHSA-VVPX-J8F3-3W6HVersion ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
golang.org/x/net/http2 Denial of Service vulnerabilityCVE-2022-27664 · GHSA-69CG-P879-7622Version ranges need review. golang.org/x/net/http2golang.org/x/net GoRed Hat High Fix reported
Panic due to large inputs affecting P-256 curves in crypto/ellipticCVE-2022-28327 · GO-2022-0435 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Session tickets lack random ticket_age_add in crypto/tlsCVE-2022-30629 · GO-2022-0531 stdlibMigration Toolkit for Containers/cpma GoRed Hat Low Fix reported
Stack exhaustion when unmarshaling certain documents in encoding/xmlCVE-2022-30633 · GO-2022-0523 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Stack exhaustion from deeply nested XML documents in encoding/xmlCVE-2022-28131 · GO-2022-0521 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Stack exhaustion when decoding certain messages in encoding/gobCVE-2022-30635 · GO-2022-0526 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Stack exhaustion on crafted paths in path/filepathCVE-2022-30632 · GO-2022-0522 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Exposure of client IP addresses in net/httpCVE-2022-32148 · GO-2022-0520 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Stack exhaustion due to deeply nested types in go/parserCVE-2022-1962 · GO-2022-0515 stdlibCryostat 2/cryostat-tech-preview/cryostat-rhel8-operator GoRed Hat Medium Fix reported
Improper sanitization of Transfer-Encoding headers in net/httpCVE-2022-1705 · GO-2022-0525 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Stack exhaustion in Glob on certain paths in io/fsCVE-2022-30630 · GO-2022-0527 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Stack exhaustion when reading certain archives in compress/gzipCVE-2022-30631 · GO-2022-0524 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported