| golang.org/x/text/language Denial of service via crafted Accept-Language headerCVE-2022-32149 · GHSA-69CH-W2M2-3VJPVersion ranges need review. |
golang.org/x/textOpenShift Developer Tools and Services/odo |
GoRed Hat |
High
|
Fix reported |
|
| x/crypto/ssh vulnerable to panic via malformed packetsCVE-2021-43565 · GHSA-GWC9-M7RH-J2WWVersion ranges need review. |
golang.org/x/cryptoMigration Toolkit for Containers/rhmtc/openshift-migration-velero-rhel8 |
GoRed Hat |
High
|
Fix reported |
|
| golang.org/x/text Infinite loopCVE-2020-14040 · GHSA-5RCV-M4M3-HFH7Version ranges need review. |
golang.org/x/textOpenShift Developer Tools and Services/jenkins-operator-container |
GoRed Hat |
Medium
|
Fix reported |
|
| Incorrect sanitization of forwarded query parameters in net/http/httputilCVE-2022-2880 · GO-2022-1038 |
stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 |
GoRed Hat |
Medium
|
Fix reported |
|
| Memory exhaustion when compiling regular expressions in regexp/syntaxCVE-2022-41715 · GO-2022-1039 |
stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 |
GoRed Hat |
Medium
|
Fix reported |
|
| Failure to strip relative path components in net/urlCVE-2022-32190 · GO-2022-0988 |
stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator |
GoRed Hat |
Medium
|
Fix reported |
|
| Unbounded memory consumption when reading headers in archive/tarCVE-2022-2879 · GO-2022-1037 |
stdlibOpenShift Developer Tools and Services/helm |
GoRed Hat |
Medium
|
Fix reported |
|
| Excessive memory allocation in net/http and net/textprotoCVE-2023-24534 · GO-2023-1704 |
stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator |
GoRed Hat |
Medium
|
Fix reported |
|
| Improper sanitization of CSS values in html/templateCVE-2023-24539 · GO-2023-1751 |
stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-rhel8-operator |
GoRed Hat |
Medium
|
Fix reported |
|
| Insufficient sanitization of Host header in net/httpCVE-2023-29406 · GO-2023-1878 |
stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-rhv-populator-rhel8 |
GoRed Hat |
Medium
|
Fix reported |
|
| Code injection via go command with cgo in cmd/goCVE-2023-29402 · GO-2023-1839 |
toolchainRed Hat Ceph Storage 3/golang |
GoRed Hat |
Medium
|
Fix reported |
|
| golang.org/x/net/http2 vulnerable to possible excessive memory growthCVE-2022-41717 · GHSA-XRJJ-MJ9H-534MVersion ranges need review. |
golang.org/x/net/http2golang.org/x/net |
GoRed Hat |
Medium
|
Fix reported |
|
| Backticks not treated as string delimiters in html/templateCVE-2023-24538 · GO-2023-1703 |
stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator |
GoRed Hat |
Medium
|
Fix reported |
|
| golang.org/x/net/html Infinite Loop vulnerabilityCVE-2021-33194 · GHSA-83G2-8M93-V3W7Version ranges need review. |
golang.org/x/netLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator |
GoRed Hat |
High
|
Fix reported |
|
| Improper handling of JavaScript whitespace in html/templateCVE-2023-24540 · GO-2023-1752 |
stdlibCustom Metric Autoscaler operator for Red Hat Openshift/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel8 |
GoRed Hat |
High
|
Fix reported |
|
| Unsafe behavior in setuid/setgid binaries in runtimeCVE-2023-29403 · GO-2023-1840 |
stdlibRed Hat Ceph Storage 3/golang |
GoRed Hat |
High
|
Fix reported |
|
| Excessive resource consumption in net/http, net/textproto and mime/multipartCVE-2023-24536 · GO-2023-1705 |
stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator |
GoRed Hat |
Medium
|
Fix reported |
|
| Infinite loop in parsing in go/scannerCVE-2023-24537 · GO-2023-1702 |
stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator |
GoRed Hat |
Medium
|
Fix reported |
|
| Excessive resource consumption in mime/multipartCVE-2022-41725 · GO-2023-1569 |
stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator |
GoRed Hat |
Medium
|
Fix reported |
|
| Improper handling of non-optional LDFLAGS in go command with cgo in cmd/goCVE-2023-29404 · GO-2023-1841 |
toolchainRed Hat Ceph Storage 3/golang |
GoRed Hat |
High
|
Fix reported |
|
