All products

Red Hat OpenShift Container Platform 4/machine-config-daemon

Red Hat · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Authorization Bypass Through User-Controlled Key in go-restfulCVE-2022-1996 · GHSA-R48Q-9G5R-8Q2HVersion ranges need review. github.com/emicklei/go-restful/v2github.com/emicklei/go-restful/v3 GoRed Hat Critical Fix reported
Uncontrolled Resource Consumption in promhttpCVE-2022-21698 · GHSA-CG3Q-J54F-5P7PVersion ranges need review. github.com/prometheus/client_golangCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat High Fix reported
Request smuggling due to accepting invalid headers in net/http via net/textprotoCVE-2019-16276 · GO-2022-0212 stdlibRed Hat Ceph Storage 2/golang GoRed Hat Medium Fix reported
Incorrect operations on the P-224 curve in crypto/ellipticCVE-2021-3114 · GO-2021-0235 stdlibOpenShift Serverless/knative-eventing GoRed Hat Medium Fix reported
Incorrect computation for some invalid field elements in crypto/ellipticCVE-2022-23806 · GO-2021-0319 stdlibLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator GoRed Hat Medium Fix reported
Stack exhaustion when reading certain archives in compress/gzipCVE-2022-30631 · GO-2022-0524 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported