| Grafana Arbitrary File ReadCVE-2019-19499 · GHSA-4PWP-CX67-5CPXVersion ranges need review. |
github.com/grafana/grafanaOpenShift Service Mesh 1/servicemesh-grafana |
GoRed Hat |
Medium
|
Fix reported |
|
| x/crypto/ssh vulnerable to panic via malformed packetsCVE-2021-43565 · GHSA-GWC9-M7RH-J2WWVersion ranges need review. |
golang.org/x/cryptoMigration Toolkit for Containers/rhmtc/openshift-migration-velero-rhel8 |
GoRed Hat |
High
|
Fix reported |
|
| Grafana XSS via a column styleCVE-2018-18624 · GHSA-9HV8-4FRF-CPRFVersion ranges need review. |
github.com/grafana/grafanaOpenShift Service Mesh 1/servicemesh-grafana |
GoRed Hat |
Medium
|
Fix reported |
|
| golang.org/x/text Infinite loopCVE-2020-14040 · GHSA-5RCV-M4M3-HFH7Version ranges need review. |
golang.org/x/textOpenShift Developer Tools and Services/jenkins-operator-container |
GoRed Hat |
Medium
|
Fix reported |
|
| Grafana XSS via the OpenTSDB datasourceCVE-2020-13430 · GHSA-7M2X-QHRQ-RP8HVersion ranges need review. |
github.com/grafana/grafanaRed Hat Ceph Storage 2/grafana |
GoRed Hat |
Medium
|
Fix reported |
|
| Grafana stored XSSCVE-2020-11110 · GHSA-XR3X-62QW-VC4WVersion ranges need review. |
github.com/grafana/grafanaOpenShift Service Mesh 1/servicemesh-grafana |
GoRed Hat |
Medium
|
Fix reported |
|
| Grafana XSS in header column renameCVE-2020-12245 · GHSA-CCMG-W4XM-P28VVersion ranges need review. |
github.com/grafana/grafanaRed Hat Ceph Storage 2/grafana |
GoRed Hat |
Medium
|
Fix reported |
|
| Grafana information disclosureCVE-2020-12458 · GHSA-3JQ7-8PH8-63XMVersion ranges need review. |
github.com/grafana/grafanaOpenShift Service Mesh 1/servicemesh-grafana |
GoRed Hat |
High
|
Fix reported |
|
| Grafana XSS via adding a link in General featureCVE-2018-18625 · GHSA-6WH2-8HW7-JW94Version ranges need review. |
github.com/grafana/grafanaRed Hat Ceph Storage 2/grafana |
GoRed Hat |
Medium
|
Fix reported |
|
| golang.org/x/net/html Infinite Loop vulnerabilityCVE-2021-33194 · GHSA-83G2-8M93-V3W7Version ranges need review. |
golang.org/x/netLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator |
GoRed Hat |
High
|
Fix reported |
|
| golang.org/x/net/http/httpguts vulnerable to Uncontrolled RecursionCVE-2021-31525 · GHSA-H86H-8PPG-MXMHVersion ranges need review. |
golang.org/x/netstdlib |
GoRed Hat |
Medium
|
Fix reported |
|
| Authentication bypass for viewing and deletions of snapshotsCVE-2021-39226 · GHSA-69J6-29VR-P3J9 |
github.com/grafana/grafanaOpenShift Service Mesh 1/servicemesh-grafana |
GoRed Hat |
High
|
Fix reported |
|
| Potential XSS vulnerability in jQueryCVE-2020-11023 · GHSA-JPCQ-CGW6-V4J6 |
components/jqueryorg.webjars.npm:jquery |
ComposerMavennpmNuGetRed HatRubyGemsWordPress |
Medium
|
Fix reported |
|
| ua-parser-js Regular Expression Denial of Service vulnerabilityCVE-2020-7793 · GHSA-394C-5J6W-4XMX |
ua-parser-jsDistributed Tracing Jaeger 1/distributed-tracing/jaeger-all-in-one-rhel7 |
npmRed Hat |
High
|
Fix reported |
|
| gopkg.in/macaron.v1 Open Redirect vulnerabilityCVE-2020-12666 · GHSA-733F-44F3-3FRWVersion ranges need review. |
gopkg.in/macaron.v1Red Hat Ceph Storage 2/grafana |
GoRed Hat |
Medium
|
Fix reported |
|
| Data race and crash in net/httpCVE-2020-15586 · GO-2021-0224 |
stdlibOpenShift Service Mesh 1/jaeger-operator |
GoRed Hat |
Medium
|
Fix reported |
|
| Arbitrary code injection via the go command with cgo on Windows in cmd/goCVE-2021-3115 · GO-2021-0068 |
toolchainOpenShift Serverless/knative-eventing |
GoRed Hat |
Medium
|
Fix reported |
|
| Panic on inputs with large exponents in math/bigCVE-2021-33198 · GO-2021-0242 |
stdlibOpenShift Serverless/knative-eventing |
GoRed Hat |
Medium
|
Fix reported |
|
| Infinite loop when decoding inputs in encoding/xmlCVE-2021-27918 · GO-2021-0234 |
stdlibDistributed Tracing Jaeger 1/distributed-tracing/jaeger-all-in-one-rhel8 |
GoRed Hat |
Medium
|
Fix reported |
|
| Improper sanitization when resolving values from DNS in netCVE-2021-33195 · GO-2021-0239 |
stdlibMigration Toolkit for Containers/rhmtc/openshift-migration-controller-rhel8 |
GoRed Hat |
Medium
|
Fix reported |
|
