All products

OpenShift Service Mesh 2.0/servicemesh-cni

Red Hat · Package
7 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
golang.org/x/text/language Out-of-bounds Read vulnerabilityCVE-2021-38561 · GHSA-PPP9-7JFF-5VJ2Version ranges need review. golang.org/x/textOpenShift Developer Tools and Services/odo GoRed Hat High Fix reported
golang.org/x/crypto/ssh NULL Pointer Dereference vulnerabilityCVE-2020-29652 · GHSA-3VM4-22FP-5RFMVersion ranges need review. golang.org/x/cryptoOpenShift Service Mesh 2.0/3scale-istio-adapter-rhel8-container GoRed Hat High Fix reported
containernetworking/cni improper limitation of path nameCVE-2021-20206 · GHSA-XJQR-G762-PXWPVersion ranges need review. github.com/containernetworking/cniOpenShift Service Mesh 2.0/servicemesh-cni GoRed Hat High Fix reported
Improper Input Validation in GoGo ProtobufCVE-2021-3121 · GHSA-C3H9-896R-86JMVersion ranges need review. github.com/gogo/protobufOpenShift Service Mesh 2.0/servicemesh-cni GoRed Hat High Fix reported
Panic during division of very large numbers in math/bigCVE-2020-28362 · GO-2021-0069 stdlibOpenShift Serverless/knative-serving GoRed Hat Medium Fix reported
Incorrect operations on the P-224 curve in crypto/ellipticCVE-2021-3114 · GO-2021-0235 stdlibOpenShift Serverless/knative-eventing GoRed Hat Medium Fix reported
golang.org/x/text: Panic in language.ParseAcceptLanguage while processing bcp47 tagCVE-2020-28852 OpenShift Service Mesh 2.0/servicemesh-cniRed Hat Advanced Cluster Management for Kubernetes 2/go Red Hat Medium No fix reported