Security
فارسی
All products

Red Hat Enterprise Linux 8/container-tools:3.0/skopeo

Red Hat · Package
18 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Incorrect sanitization of forwarded query parameters in net/http/httputilCVE-2022-2880 · GO-2022-1038 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Memory exhaustion when compiling regular expressions in regexp/syntaxCVE-2022-41715 · GO-2022-1039 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Unbounded memory consumption when reading headers in archive/tarCVE-2022-2879 · GO-2022-1037 stdlibOpenShift Developer Tools and Services/helm GoRed Hat Medium Fix reported
Clarify Content-Type handlingCVE-2021-41190 · GHSA-MC8V-MGRF-8F4M github.com/opencontainers/distribution-specRed Hat Enterprise Linux 8/container-tools:2.0/buildah GoRed Hat Low Fix reported
Excessive memory allocation in net/http and net/textprotoCVE-2023-24534 · GO-2023-1704 stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator GoRed Hat Medium Fix reported
Improper sanitization of CSS values in html/templateCVE-2023-24539 · GO-2023-1751 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-rhel8-operator GoRed Hat Medium Fix reported
golang.org/x/net/http2 vulnerable to possible excessive memory growthCVE-2022-41717 · GHSA-XRJJ-MJ9H-534MVersion ranges need review. golang.org/x/net/http2golang.org/x/net GoRed Hat Medium Fix reported
Backticks not treated as string delimiters in html/templateCVE-2023-24538 · GO-2023-1703 stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator GoRed Hat Medium Fix reported
Improper handling of JavaScript whitespace in html/templateCVE-2023-24540 · GO-2023-1752 stdlibCustom Metric Autoscaler operator for Red Hat Openshift/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel8 GoRed Hat High Fix reported
Excessive resource consumption in net/http, net/textproto and mime/multipartCVE-2023-24536 · GO-2023-1705 stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator GoRed Hat Medium Fix reported
Infinite loop in parsing in go/scannerCVE-2023-24537 · GO-2023-1702 stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator GoRed Hat Medium Fix reported
golang.org/x/net vulnerable to Uncontrolled Resource ConsumptionCVE-2022-41723 · GHSA-VVPX-J8F3-3W6HVersion ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
Excessive resource consumption in mime/multipartCVE-2022-41725 · GO-2023-1569 stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator GoRed Hat Medium Fix reported
Panic on large handshake records in crypto/tlsCVE-2022-41724 · GO-2023-1570 stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator GoRed Hat Medium Fix reported
golang.org/x/net/http2 Denial of Service vulnerabilityCVE-2022-27664 · GHSA-69CG-P879-7622Version ranges need review. golang.org/x/net/http2golang.org/x/net GoRed Hat High Fix reported
Panic on certain certificates in crypto/tlsCVE-2021-34558 · GO-2021-0243 stdlibOpenShift Pipelines/golang GoRed Hat Medium Fix reported
Session tickets lack random ticket_age_add in crypto/tlsCVE-2022-30629 · GO-2022-0531 stdlibMigration Toolkit for Containers/cpma GoRed Hat Low Fix reported
Panic when decoding Float and Rat types in math/bigCVE-2022-32189 · GO-2022-0537 stdlibCustom Metric Autoscaler operator for Red Hat Openshift/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel8 GoRed Hat Low Fix reported