| Sensitive headers not cleared on cross-origin redirect in net/httpCVE-2025-4673 · GO-2025-3751 |
stdlibCryostat 4/cryostat/cryostat-storage-rhel9 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSONCVE-2024-24786 · GHSA-8R3F-844C-MC37بازه‌ها نیاز به بررسی دارند. |
google.golang.org/protobuf/encoding/protojsongoogle.golang.org/protobuf/internal/encoding/json |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Unbounded allocation when parsing GNU sparse map in archive/tarCVE-2025-58183 · GO-2025-4014 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| HTTP/2 rapid reset can cause excessive work in net/httpCVE-2023-39325 · GHSA-4374-P667-P6C8بازه‌ها نیاز به بررسی دارند. |
golang.org/x/netstdlib |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed DataCVE-2025-11065 · GHSA-2464-8J7C-4CJMبازه‌ها نیاز به بررسی دارند. |
github.com/go-viper/mapstructure/v2github.com/go-viper/mapstructure |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metricsCVE-2023-45142 · GHSA-RCJV-MGP8-QVMRبازه‌ها نیاز به بررسی دارند. |
go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestfulgo.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Memory leaks in code encrypting and verifying RSA payloadsCVE-2024-1394 · GHSA-78HX-GP6G-7MJ6بازه‌ها نیاز به بررسی دارند. |
github.com/golang-fips/gogithub.com/golang-fips/openssl/v2 |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Incorrect results returned from Rows.Scan in database/sqlCVE-2025-47907 · GO-2025-3849 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| RoadRunner is at risk of HTTP Request/Response Smuggling through vulnerable dependencyCVE-2025-22871 · GHSA-G9PC-8G42-G6VQ |
spiral/roadrunnerstdlib |
ComposerGoRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| HTTP/2 Stream Cancellation AttackCVE-2023-44487 · GHSA-QPPJ-FM5R-HXR3 |
golang.org/x/netcom.typesafe.akka:akka-http-core |
GoMavenRed HatSwift |
متوسط
|
اصلاح گزارش شده |
|
| Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netipCVE-2024-24790 · GO-2024-2887 |
stdlibBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-waiters-rhel8 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Comments in display names are incorrectly handled in net/mailCVE-2024-24784 · GO-2024-2609 |
stdlibMulticluster Engine for Kubernetes/multicluster-engine/hive-rhel8 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Improper handling of HTML-like comments in script contexts in html/templateCVE-2023-39318 · GO-2023-2041 |
stdlibCost Management Metrics Operator/costmanagement-metrics-operator-container |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Improper handling of special tags within script contexts in html/templateCVE-2023-39319 · GO-2023-2043 |
stdlibCost Management Metrics Operator/costmanagement-metrics-operator-container |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| net/http, x/net/http2: close connections when receiving too many headersCVE-2023-45288 · GHSA-4V7X-PQXF-CX7Mبازه‌ها نیاز به بررسی دارند. |
golang.org/x/net/http2golang.org/x/net |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Large RSA keys can cause high CPU usage in crypto/tlsCVE-2023-29409 · GO-2023-1987 |
stdlibNode Maintenance Operator/workload-availability/node-maintenance-rhel8-operator |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channelCVE-2023-45287 · GO-2023-2375 |
stdlibCryostat 2/cryostat-tech-preview/cryostat-rhel8-operator |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Memory exhaustion in QUIC connection handling in crypto/tlsCVE-2023-39322 · GO-2023-2045 |
stdlibCost Management Metrics Operator/costmanagement-metrics-operator-container |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Denial of service via chunk extensions in net/httpCVE-2023-39326 · GO-2023-2382 |
stdlibBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-waiters-rhel8 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Verify panics on certificates with an unknown public key algorithm in crypto/x509CVE-2024-24783 · GO-2024-2598 |
stdlibCost Management Metrics Operator/costmanagement-metrics-operator-container |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
