Red Hat OpenShift Container Platform 3.11/atomic-openshift-cluster-autoscaler

Red Hat · Package

8 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
golang.org/x/crypto/ssh NULL Pointer Dereference vulnerabilityCVE-2020-29652 · GHSA-3VM4-22FP-5RFMVersion ranges need review.	golang.org/x/crypto OpenShift Service Mesh 2.0/3scale-istio-adapter-rhel8-container	GoRed Hat	High	Fix reported	2026-09-10
Improper Verification of Cryptographic Signature in golang.org/x/cryptoCVE-2020-9283 · GHSA-FFHG-7MH4-33C4Version ranges need review.	golang.org/x/crypto OpenShift Service Mesh 1/jaeger-operator	GoRed Hat	High	Fix reported	2026-09-10
Authorization bypass in github.com/dgrijalva/jwt-goCVE-2020-26160 · GHSA-W73W-5M7G-F7QCVersion ranges need review.	github.com/dgrijalva/jwt-go/v4 github.com/dgrijalva/jwt-go	GoRed Hat	High	Fix reported	2026-07-08
containernetworking/cni improper limitation of path nameCVE-2021-20206 · GHSA-XJQR-G762-PXWPVersion ranges need review.	github.com/containernetworking/cni OpenShift Service Mesh 2.0/servicemesh-cni	GoRed Hat	High	Fix reported	2026-03-14
Request smuggling due to accepting invalid headers in net/http via net/textprotoCVE-2019-16276 · GO-2022-0212	stdlib Red Hat Ceph Storage 2/golang	GoRed Hat	Medium	Fix reported	2024-05-20
Data race and crash in net/httpCVE-2020-15586 · GO-2021-0224	stdlib OpenShift Service Mesh 1/jaeger-operator	GoRed Hat	Medium	Fix reported	2024-05-20
Incorrect operations on the P-224 curve in crypto/ellipticCVE-2021-3114 · GO-2021-0235	stdlib OpenShift Serverless/knative-eventing	GoRed Hat	Medium	Fix reported	2024-05-20
golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputsCVE-2020-16845	OpenShift Service Mesh 1/jaeger-operator OpenShift Service Mesh 1/jaeger	Red Hat	Medium	No fix reported	Not recorded