Red Hat OpenShift Container Platform 3.11/cri-tools
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| yaml package for Go can consume excessive amounts of CPU or memory | gopkg.in/yaml.v2Cryostat 2/cryostat-tech-preview/cryostat-rhel8-operator | GoRed Hat | High | Fix reported | |
| Request smuggling due to accepting invalid headers in net/http via net/textproto | stdlibRed Hat Ceph Storage 2/golang | GoRed Hat | Medium | Fix reported | |
| Data race and crash in net/http | stdlibOpenShift Service Mesh 1/jaeger-operator | GoRed Hat | Medium | Fix reported | |
| Incorrect operations on the P-224 curve in crypto/elliptic | stdlibOpenShift Serverless/knative-eventing | GoRed Hat | Medium | Fix reported | |
| golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs | OpenShift Service Mesh 1/jaeger-operatorOpenShift Service Mesh 1/jaeger | Red Hat | Medium | No fix reported |