Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Migration Toolkit for Applications 6/mta/mta-hub-rhel9
Red Hat
· Package
13 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2024-28180 · GHSA-C5Q2-7R4C-MV6G
Version ranges need review.
github.com/go-jose/go-jose/v3
github.com/go-jose/go-jose/v4
Go
Red Hat
Medium
Fix reported
2026-09-10
github.com/go-resty/resty/v2 HTTP request body disclosure
CVE-2023-45286 · GHSA-XWH9-GC39-5298
Version ranges need review.
github.com/go-resty/resty/v2
Migration Toolkit for Applications 6/mta/mta-hub-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip
CVE-2024-24790 · GO-2024-2887
stdlib
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-waiters-rhel8
Go
Red Hat
Medium
Fix reported
2026-03-23
pgx SQL Injection via Protocol Message Size Overflow
CVE-2024-27304 · GHSA-MRWW-27VC-GGHV
github.com/jackc/pgx/v4
github.com/jackc/pgx/v5
Go
Red Hat
High
Fix reported
2026-03-14
net/http, x/net/http2: close connections when receiving too many headers
CVE-2023-45288 · GHSA-4V7X-PQXF-CX7M
Version ranges need review.
golang.org/x/net/http2
golang.org/x/net
Go
Red Hat
Medium
Fix reported
2026-02-04
Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel
CVE-2023-45287 · GO-2023-2375
stdlib
Cryostat 2/cryostat-tech-preview/cryostat-rhel8-operator
Go
Red Hat
Medium
Fix reported
2026-02-04
Denial of service due to improper 100-continue handling in net/http
CVE-2024-24791 · GO-2024-2963
stdlib
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-waiters-rhel8
Go
Red Hat
Medium
Fix reported
2026-02-04
Denial of service via chunk extensions in net/http
CVE-2023-39326 · GO-2023-2382
stdlib
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-waiters-rhel8
Go
Red Hat
Medium
Fix reported
2026-02-04
Verify panics on certificates with an unknown public key algorithm in crypto/x509
CVE-2024-24783 · GO-2024-2598
stdlib
Cost Management Metrics Operator/costmanagement-metrics-operator-container
Go
Red Hat
Medium
Fix reported
2026-02-04
Errors returned from JSON marshaling may break template escaping in html/template
CVE-2024-24785 · GO-2024-2610
stdlib
Cost Management Metrics Operator/costmanagement-metrics-operator-container
Go
Red Hat
Medium
Fix reported
2026-02-04
Malformed DNS message can cause infinite loop in net
CVE-2024-24788 · GO-2024-2824
stdlib
Cost Management Metrics Operator/costmanagement-metrics-operator-container
Go
Red Hat
Medium
Fix reported
2026-02-04
Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http
CVE-2023-45289 · GO-2024-2600
stdlib
Builds for Red Hat OpenShift/openshift-builds-triggers-container
Go
Red Hat
Medium
Fix reported
2026-02-04
Memory exhaustion in multipart form parsing in net/textproto and net/http
CVE-2023-45290 · GO-2024-2599
stdlib
Cost Management Metrics Operator/costmanagement-metrics-operator-container
Go
Red Hat
Medium
Fix reported
2026-02-04
