All products

OpenShift Service Mesh 1/servicemesh-operator

Red Hat · Package
5 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
x/crypto/ssh vulnerable to panic via malformed packetsCVE-2021-43565 · GHSA-GWC9-M7RH-J2WWVersion ranges need review. golang.org/x/cryptoMigration Toolkit for Containers/rhmtc/openshift-migration-velero-rhel8 GoRed Hat High Fix reported
Authorization bypass in github.com/dgrijalva/jwt-goCVE-2020-26160 · GHSA-W73W-5M7G-F7QCVersion ranges need review. github.com/dgrijalva/jwt-go/v4github.com/dgrijalva/jwt-go GoRed Hat High Fix reported
Helm passes repository credentials to alternate domainCVE-2021-32690 · GHSA-56HP-XQP3-W2JF helm.sh/helm/v3OpenShift Developer Tools and Services/helm GoRed Hat Medium Fix reported
Panic during division of very large numbers in math/bigCVE-2020-28362 · GO-2021-0069 stdlibOpenShift Serverless/knative-serving GoRed Hat Medium Fix reported
Incorrect operations on the P-224 curve in crypto/ellipticCVE-2021-3114 · GO-2021-0235 stdlibOpenShift Serverless/knative-eventing GoRed Hat Medium Fix reported