Security
فارسی
All products

OpenShift Service Mesh 2.1/servicemesh

Red Hat · Package
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
golang.org/x/text/language Out-of-bounds Read vulnerabilityCVE-2021-38561 · GHSA-PPP9-7JFF-5VJ2Version ranges need review. golang.org/x/textOpenShift Developer Tools and Services/odo GoRed Hat High Fix reported
x/crypto/ssh vulnerable to panic via malformed packetsCVE-2021-43565 · GHSA-GWC9-M7RH-J2WWVersion ranges need review. golang.org/x/cryptoMigration Toolkit for Containers/rhmtc/openshift-migration-velero-rhel8 GoRed Hat High Fix reported
Uncontrolled Resource Consumption in promhttpCVE-2022-21698 · GHSA-CG3Q-J54F-5P7PVersion ranges need review. github.com/prometheus/client_golangCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat High Fix reported
golang.org/x/net/http2/h2c vulnerable to request smuggling attackCVE-2022-41721 · GHSA-FXG5-WQ6X-VR4WVersion ranges need review. golang.org/x/netOpenShift Serverless/cli GoRed Hat High Fix reported
Helm vulnerable to denial of service through schema fileCVE-2022-23526 · GHSA-67FX-WX78-JX33Version ranges need review. helm.sh/helm/v3OpenShift Developer Tools and Services/helm GoRed Hat Medium Fix reported
golang.org/x/net/http2 vulnerable to possible excessive memory growthCVE-2022-41717 · GHSA-XRJJ-MJ9H-534MVersion ranges need review. golang.org/x/net/http2golang.org/x/net GoRed Hat Medium Fix reported
golang.org/x/net vulnerable to Uncontrolled Resource ConsumptionCVE-2022-41723 · GHSA-VVPX-J8F3-3W6HVersion ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
Panic when opening certain archives in archive/zipCVE-2021-41772 · GO-2021-0264 stdlibOpenShift Serverless/cli GoRed Hat Medium Fix reported
Misdirected I/O in syscallCVE-2021-44717 · GO-2022-0289 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
istio: Privileged Escalation in Kubernetes Gateway APICVE-2022-21701 OpenShift Service Mesh 1/servicemeshOpenShift Service Mesh 2.1/servicemesh Red Hat Medium No fix reported
istio: Authorization policy bypassCVE-2022-21679 OpenShift Service Mesh 1/servicemeshOpenShift Service Mesh 2.1/servicemesh Red Hat Medium No fix reported
Istio: Denial of service attack via a specially crafted messageCVE-2022-39278 OpenShift Service Mesh 2.1/servicemesh Red Hat Medium No fix reported