| golang.org/x/crypto/ssh Denial of service via crafted SignerCVE-2022-27191 · GHSA-8C26-WMH5-6G9Vبازه‌ها نیاز به بررسی دارند. |
golang.org/x/cryptoMigration Toolkit for Containers/cpma |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Incorrect sanitization of forwarded query parameters in net/http/httputilCVE-2022-2880 · GO-2022-1038 |
stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Memory exhaustion when compiling regular expressions in regexp/syntaxCVE-2022-41715 · GO-2022-1039 |
stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Failure to strip relative path components in net/urlCVE-2022-32190 · GO-2022-0988 |
stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Excessive memory allocation in net/http and net/textprotoCVE-2023-24534 · GO-2023-1704 |
stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Improper sanitization of CSS values in html/templateCVE-2023-24539 · GO-2023-1751 |
stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-rhel8-operator |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Insufficient sanitization of Host header in net/httpCVE-2023-29406 · GO-2023-1878 |
stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-rhv-populator-rhel8 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| golang.org/x/net/http2 vulnerable to possible excessive memory growthCVE-2022-41717 · GHSA-XRJJ-MJ9H-534Mبازه‌ها نیاز به بررسی دارند. |
golang.org/x/net/http2golang.org/x/net |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Improper handling of HTML-like comments in script contexts in html/templateCVE-2023-39318 · GO-2023-2041 |
stdlibCost Management Metrics Operator/costmanagement-metrics-operator-container |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Backticks not treated as string delimiters in html/templateCVE-2023-24538 · GO-2023-1703 |
stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Improper handling of special tags within script contexts in html/templateCVE-2023-39319 · GO-2023-2043 |
stdlibCost Management Metrics Operator/costmanagement-metrics-operator-container |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Large RSA keys can cause high CPU usage in crypto/tlsCVE-2023-29409 · GO-2023-1987 |
stdlibNode Maintenance Operator/workload-availability/node-maintenance-rhel8-operator |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Improper handling of JavaScript whitespace in html/templateCVE-2023-24540 · GO-2023-1752 |
stdlibCustom Metric Autoscaler operator for Red Hat Openshift/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel8 |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Excessive resource consumption in net/http, net/textproto and mime/multipartCVE-2023-24536 · GO-2023-1705 |
stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Infinite loop in parsing in go/scannerCVE-2023-24537 · GO-2023-1702 |
stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Memory exhaustion in QUIC connection handling in crypto/tlsCVE-2023-39322 · GO-2023-2045 |
stdlibCost Management Metrics Operator/costmanagement-metrics-operator-container |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| golang.org/x/net vulnerable to Uncontrolled Resource ConsumptionCVE-2022-41723 · GHSA-VVPX-J8F3-3W6Hبازه‌ها نیاز به بررسی دارند. |
golang.org/x/netstdlib |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Excessive resource consumption in mime/multipartCVE-2022-41725 · GO-2023-1569 |
stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Panic on large handshake records in crypto/tlsCVE-2022-41724 · GO-2023-1570 |
stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Panic when processing post-handshake message on QUIC connections in crypto/tlsCVE-2023-39321 · GO-2023-2044 |
stdlibCost Management Metrics Operator/costmanagement-metrics-operator-container |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
