{"id":"CVE-2020-28362","aliases":["ALPINE-CVE-2020-28362","ALSA-2021:0706","AZL-79068","AZL-98991","BELL-CVE-2020-28362","BIT-golang-2020-28362","DEBIAN-CVE-2020-28362","EUVD-2020-20822","GHSA-gff4-9rfx-4pcw","GO-2021-0069","RHBA-2021:0482","RHSA-2020:5333","RHSA-2020:5493","RHSA-2020:5634","RHSA-2021:0038","RHSA-2021:0145","RHSA-2021:0172","RHSA-2021:0706","RHSA-2021:0956","RHSA-2021:1366","RHSA-2021:1551","RHSA-2021:2042","SUSE-SU-2020:3368-1","SUSE-SU-2020:3369-1","UBUNTU-CVE-2020-28362","openSUSE-SU-2020:2047-1","openSUSE-SU-2020:2067-1","openSUSE-SU-2020:2139-1","openSUSE-SU-2024:10807-1","openSUSE-SU-2024:10808-1"],"status":"published","title":"Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.","description":"Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-04","score":0.03859,"percentile":0.90196,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-295"],"published":"2020-11-18T16:27:38Z","modified":"2026-11-03T06:32:25.581523383Z","affected":[{"source":"osv","ecosystem":"Alpine:v3.13","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.15"},{"fixed":"1.15.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.15"},{"fixed":"1.15.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.15"},{"fixed":"1.15.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.15"},{"fixed":"1.15.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.15"},{"fixed":"1.15.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.15"},{"fixed":"1.15.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.15"},{"fixed":"1.15.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.15"},{"fixed":"1.15.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.15"},{"fixed":"1.15.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.15"},{"fixed":"1.15.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.15"},{"fixed":"1.15.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.15"},{"fixed":"1.15.5-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11-1.module_el8.5.0+108+00865455"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11-1.module_el8.5.0+2635+e4386a39"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.15-1.module_el8.5.0+108+00865455"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.15-1.module_el8.5.0+2635+e4386a39"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.130.0-1.module_el8.5.0+2635+e4386a39"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.130.0-1.module_el8.5.0+108+00865455"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.3-4.module_el8.5.0+2635+e4386a39"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.3-4.module_el8.5.0+108+00865455"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.41-4.module_el8.5.0+108+00865455"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.41-4.module_el8.5.0+2635+e4386a39"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12-9.module_el8.3.0+2044+12421f43"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12-9.module_el8.4.0+2496+12421f43"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12-9.module_el8.5.0+119+9a9ec082"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12-9.module_el8.4.0+2496+12421f43"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12-9.module_el8.3.0+2044+12421f43"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12-9.module_el8.5.0+119+9a9ec082"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.8-1.module_el8.5.0+108+00865455"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.8-1.module_el8.5.0+2635+e4386a39"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python-podman-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-0.2.gitd0a45fe.module_el8.5.0+2635+e4386a39"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python-podman-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-0.2.gitd0a45fe.module_el8.5.0+108+00865455"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12-9.module_el8.3.0+2044+12421f43"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12-9.module_el8.4.0+2496+12421f43"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12-9.module_el8.5.0+119+9a9ec082"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.41-4.module_el8.5.0+2635+e4386a39"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.41-4.module_el8.5.0+108+00865455"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.41-4.module_el8.5.0+108+00865455"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.41-4.module_el8.5.0+2635+e4386a39"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.2-3.git21fdece.module_el8.5.0+2635+e4386a39"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.2-3.git21fdece.module_el8.5.0+108+00865455"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.7-1.module_el8.5.0+108+00865455"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.7-1.module_el8.5.0+2635+e4386a39"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.1-2.module_el8.5.0+108+00865455"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.1-2.module_el8.5.0+2635+e4386a39"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.25.7-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.27.0"},{"last_affected":"1.27.1-1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"golang","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.14.12"},{"introduced":"1.15.0"},{"fixed":"1.15.5"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"golang-1.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.5-1"}]}]},{"source":"osv","ecosystem":"Go","package":"stdlib","ranges":[{"type":"SEMVER","events":[{"introduced":"1.14.0-0"},{"fixed":"1.14.12"},{"introduced":"1.15.0-0"},{"fixed":"1.15.5"}]}]},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.0::el8","package":"kiali","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:v1.24.4.redhat2-1.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.12-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.14-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.12-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.14-golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.12-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.14-golang-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.12-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.14-golang-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.12-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.14-golang-misc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.12-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.14-golang-race","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.12-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.14-golang-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.12-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.14-golang-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.12-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.14-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.12-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"delve","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-1.module+el8.3.0+7840+63dfb1ed"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"delve-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-1.module+el8.3.0+7840+63dfb1ed"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"delve-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-1.module+el8.3.0+7840+63dfb1ed"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"go-toolset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.12-1.module+el8.3.0+8784+380394dc"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.12-1.module+el8.3.0+8784+380394dc"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.12-1.module+el8.3.0+8784+380394dc"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.12-1.module+el8.3.0+8784+380394dc"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-misc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.12-1.module+el8.3.0+8784+380394dc"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-race","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.12-1.module+el8.3.0+8784+380394dc"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.12-1.module+el8.3.0+8784+380394dc"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.12-1.module+el8.3.0+8784+380394dc"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-202102060108.p0.git.97095.7271b90.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-202102060108.p0.git.97095.7271b90.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-202102060108.p0.git.97095.7271b90.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-202102060108.p0.git.97095.7271b90.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"python-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7-1.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"python3-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7-1.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"ignition","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-2.rhaos4.7.git1d56dc8.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"ignition-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-2.rhaos4.7.git1d56dc8.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"ignition-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-2.rhaos4.7.git1d56dc8.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"ignition-validate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-2.rhaos4.7.git1d56dc8.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"ignition-validate-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-2.rhaos4.7.git1d56dc8.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.0-0.rhaos4.7.git8921e00.el7.51"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.0-0.rhaos4.7.git8921e00.el7.51"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"cri-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0-3.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"cri-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0-3.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.0-0.rhaos4.7.git8921e00.el8.51"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.0-0.rhaos4.7.git8921e00.el8.51"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.0-0.rhaos4.7.git8921e00.el8.51"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"cri-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.0-1.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"cri-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.0-1.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"cri-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.0-1.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.1608634578-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.1609853716-1.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202012190744.p0.git.94235.c62c6f7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202012172338.p0.git.3800.30af700.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202012172338.p0.git.3800.30af700.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202012190744.p0.git.94235.c62c6f7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.1-2.rhaos4.6.git2af9ecf.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.1-2.rhaos4.6.git2af9ecf.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.1-2.rhaos4.6.git2af9ecf.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202012190744.p0.git.94235.c62c6f7.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202012172338.p0.git.3800.30af700.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202012172338.p0.git.3800.30af700.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202012190744.p0.git.94235.c62c6f7.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:serverless:1.0::el8","package":"openshift-serverless-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18.4-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202101160934.p0.git.94242.fc5242e.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202101160934.p0.git.94242.fc5242e.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202101160934.p0.git.94242.fc5242e.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202101160934.p0.git.94242.fc5242e.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-3.rhaos4.6.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-3.rhaos4.6.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-3.rhaos4.6.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-3.rhaos4.6.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-3.rhaos4.6.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.6-8.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.6-8.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.6-8.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.6-8.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.6-8.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11-1.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.15-1.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.130.0-1.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.3-4.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.3-4.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.3-4.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.41-4.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12-9.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12-9.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12-9.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12-9.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.8-1.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.8-1.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.8-1.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.4-26.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.4-26.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.4-26.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.4-26.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.4-26.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.4-26.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.4-26.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-podman-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-0.2.gitd0a45fe.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12-9.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-64.rc10.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-64.rc10.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-64.rc10.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.41-4.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.41-4.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.41-4.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.41-4.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.2-3.git21fdece.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.2-3.git21fdece.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.2-3.git21fdece.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.7-1.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.1-2.module+el8.3.0+10188+4c10031c"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"openshift-eventrouter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2-6.git7c289cc.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"openshift-eventrouter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2-6.git7c289cc.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"openshift-eventrouter-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2-6.git7c289cc.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"golang-github-prometheus-promu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-3.git642a960.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"prometheus-promu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-3.git642a960.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"cri-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.0-2.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"cri-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.0-2.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-95.rhaos4.8.gitcd80260.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-95.rhaos4.8.gitcd80260.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"cri-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.0-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"cri-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.0-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"cri-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.0-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-95.rhaos4.8.gitcd80260.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-95.rhaos4.8.gitcd80260.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-95.rhaos4.8.gitcd80260.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.277.3.1620393611-1.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift_container_storage:4.7::el8","package":"mcg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.7.0-69.85e2026.5.7.el8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP1","package":"go1.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.5-1.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"go1.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.5-1.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP1","package":"go1.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.12-1.26.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"go1.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.12-1.26.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.14~beta1-1","1.14~beta1-2","1.14~rc1-1","1.14-1","1.14.1-1","1.14.2-1","1.14.2-1ubuntu1","1.14.3-2ubuntu2~20.04.1","1.14.3-2ubuntu2~20.04.2"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"go1.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.12-lp151.22.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"go1.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.12-lp152.2.12.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"go1.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.5-lp152.2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"go1.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.15-1.6"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"go1.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.15-1.2"}]}]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"golang","product":"go"},{"vendor":"netapp","product":"cloud_insights_telegraf_agent"},{"vendor":"netapp","product":"trident"}],"references":[{"url":"https://lists.apache.org/thread.html/rd02e75766cd333a0df417588460f5e4477060633000bfe94955851fd%40%3Cissues.trafficcontrol.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://groups.google.com/g/golang-nuts/c/c-ssaaS7RMI","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F3ZSHGNTJWCWYAKY5OLZS2XQQYHSXSUO/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://security.netapp.com/advisory/ntap-20201202-0004/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2W4COUPL3YVTZ6RTEIT6LPBDJUFF3VSP/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/12166-security-advisory-62","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28362","tags":["web","advisory"]},{"url":"https://lists.apache.org/thread.html/rd02e75766cd333a0df417588460f5e4477060633000bfe94955851fd@%3Cissues.trafficcontrol.apache.org%3E"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2W4COUPL3YVTZ6RTEIT6LPBDJUFF3VSP/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F3ZSHGNTJWCWYAKY5OLZS2XQQYHSXSUO/"},{"url":"https://github.com/advisories/GHSA-gff4-9rfx-4pcw"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-28362","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0706","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/1915734","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2021-0706.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2021-20188","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2020-28362.html","tags":["report"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2020-28362","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-28362","tags":["advisory"]},{"url":"https://go.dev/cl/269657","tags":["fix"]},{"url":"https://go.googlesource.com/go/+/1e1fa5903b760c6714ba17e50bf850b01f49135c","tags":["fix"]},{"url":"https://go.dev/issue/42552","tags":["report"]},{"url":"https://groups.google.com/g/golang-announce/c/NpBGTTmKzpM/m/fLguyiM2CAAJ","tags":["web","article","report"]},{"url":"https://access.redhat.com/errata/RHBA-2021:0482","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/MAISTRA-2086","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhba-2021_0482.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28362","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1897635","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28362","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2020:5333","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_developer_tools/1/html/using_go_1.14.7_toolset","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1897643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1897646","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5333.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28366","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28366","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28366","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28367","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28367","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28367","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:5493","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_developer_tools/1/html/using_go_1.14.10_toolset","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1874857","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5493.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-24553","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-24553","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-24553","tags":["advisory"]},{"url":"https://groups.google.com/forum/#!topic/golang-announce/8wqlSbkLdPs","tags":["article"]},{"url":"https://www.redteam-pentesting.de/en/advisories/rt-sa-2020-004/-inconsistent-behavior-of-gos-cgi-and-fastcgi-transport-may-lead-to-cross-site-scripting","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2020:5634","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693905","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1886640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1888248","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1889972","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1910081","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1921650","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2020_5634.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-3884","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-3884","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3884","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-8566","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8566","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8566","tags":["advisory"]},{"url":"https://github.com/kubernetes/kubernetes/issues/95624","tags":["article"]},{"url":"https://groups.google.com/g/kubernetes-announce/c/ScdmyORnPDk","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-15157","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-15157","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-15157","tags":["advisory"]},{"url":"https://github.com/containerd/containerd/releases/tag/v1.2.14","tags":["article"]},{"url":"https://github.com/containerd/containerd/security/advisories/GHSA-742w-89gc-8m9c","tags":["article"]},{"url":"https://www.openwall.com/lists/oss-security/2020/10/15/1","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-25658","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-25658","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25658","tags":["advisory"]},{"url":"https://github.com/sybrenstuvel/python-rsa/issues/165","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3121","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3121","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3121","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0038","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1895939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1895940","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1895941","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1895945","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1895946","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1895947","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0038.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2304","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2304","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2304","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2145","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2305","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2305","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2305","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2115","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2306","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2306","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2306","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2104","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2307","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2307","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2307","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-1646","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2308","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2308","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2308","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2102","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2309","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2309","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2309","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2103","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0145","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless_applications/installing-openshift-serverless-1#installing-kn","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1906386","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0145.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0172","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1886637","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1917413","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0172.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-8564","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8564","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8564","tags":["advisory"]},{"url":"https://github.com/kubernetes/kubernetes/issues/95622","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-15586","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1856953","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-15586","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-15586","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/XZNfaiwgt2w/m/E6gHDs32AQAJ","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-16845","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1867099","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-16845","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-16845","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/NyPIaucMgXo","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1915734","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0706.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-20188","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-20188","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20188","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0956","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1941433","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0956.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:1366","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1918750","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1953464","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1366.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3114","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3114","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3114","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/mperVMGa98w","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2021:1551","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1945710","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1945714","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1959660","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1551.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21639","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1947102","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21639","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21639","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1947105","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21640","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21640","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-28163","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-28163","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-28163","tags":["advisory"]},{"url":"https://github.com/eclipse/jetty.project/security/advisories/GHSA-j6qj-j888-vvgq","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-28165","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-28165","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-28165","tags":["advisory"]},{"url":"https://github.com/eclipse/jetty.project/security/advisories/GHSA-26vr-8j45-3r4w","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2042","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1883371","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1941502","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2042.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-26160","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-26160","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-26160","tags":["advisory"]},{"url":"https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMDGRIJALVAJWTGO-596515","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203368-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1175132","tags":["report"]},{"url":"https://bugzilla.suse.com/1178750","tags":["report"]},{"url":"https://bugzilla.suse.com/1178752","tags":["report"]},{"url":"https://bugzilla.suse.com/1178753","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28367","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203369-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1164903","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-28362","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/E2QCSRQATMLK7WM4IWLILC7IQJFW7PVI/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IQVUQXAVUQCNNOSHNTQGRCAEYALRL2NA/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HGUG34M7TVN5CJXWIHJF454FAT7TTWY/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15586","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-24553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-27918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-31525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-34558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-36221","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-28362","description":"Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.","status":"published","published":"2020-11-18T16:27:38Z","modified":"2024-08-04T16:33:59.119Z","references":[{"url":"https://lists.apache.org/thread.html/rd02e75766cd333a0df417588460f5e4477060633000bfe94955851fd%40%3Cissues.trafficcontrol.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://groups.google.com/g/golang-nuts/c/c-ssaaS7RMI","tags":["x_refsource_CONFIRM"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F3ZSHGNTJWCWYAKY5OLZS2XQQYHSXSUO/","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"https://security.netapp.com/advisory/ntap-20201202-0004/","tags":["x_refsource_CONFIRM"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2W4COUPL3YVTZ6RTEIT6LPBDJUFF3VSP/","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/12166-security-advisory-62","tags":["x_refsource_MISC"]},{"url":"https://lists.apache.org/thread.html/rd02e75766cd333a0df417588460f5e4477060633000bfe94955851fd%40%3Cissues.trafficcontrol.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://groups.google.com/g/golang-nuts/c/c-ssaaS7RMI","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F3ZSHGNTJWCWYAKY5OLZS2XQQYHSXSUO/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20201202-0004/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2W4COUPL3YVTZ6RTEIT6LPBDJUFF3VSP/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/12166-security-advisory-62","tags":["x_refsource_MISC","x_transferred"]}],"updated_at":"2026-11-02T14:35:57.017407Z"}],"euvd":[{"id":"EUVD-2020-20822","description":"Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.","status":"published","published":"2020-11-18T16:27:38Z","modified":"2024-08-04T16:33:59Z","references":[{"url":"https://lists.apache.org/thread.html/rd02e75766cd333a0df417588460f5e4477060633000bfe94955851fd%40%3Cissues.trafficcontrol.apache.org%3E"},{"url":"https://groups.google.com/g/golang-nuts/c/c-ssaaS7RMI"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F3ZSHGNTJWCWYAKY5OLZS2XQQYHSXSUO/"},{"url":"https://security.netapp.com/advisory/ntap-20201202-0004/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2W4COUPL3YVTZ6RTEIT6LPBDJUFF3VSP/"},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/12166-security-advisory-62"}],"updated_at":"2026-11-03T03:07:10.123634Z"}],"ghsa":[{"id":"GHSA-gff4-9rfx-4pcw","title":"Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.","description":"Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.","status":"published","published":"2022-05-24T17:34:32Z","modified":"2023-01-29T05:04:31Z","cwes":["CWE-295"],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28362"},{"url":"https://groups.google.com/g/golang-nuts/c/c-ssaaS7RMI"},{"url":"https://lists.apache.org/thread.html/rd02e75766cd333a0df417588460f5e4477060633000bfe94955851fd@%3Cissues.trafficcontrol.apache.org%3E"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2W4COUPL3YVTZ6RTEIT6LPBDJUFF3VSP/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F3ZSHGNTJWCWYAKY5OLZS2XQQYHSXSUO/"},{"url":"https://security.netapp.com/advisory/ntap-20201202-0004/"},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/12166-security-advisory-62"},{"url":"https://github.com/advisories/GHSA-gff4-9rfx-4pcw"}],"updated_at":"2026-11-02T14:45:34.663559Z"}],"nvd":[{"id":"CVE-2020-28362","description":"Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.","status":"published","published":"2020-11-18T17:15:11.93Z","modified":"2026-06-17T03:10:19.88Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-295"],"references":[{"url":"https://groups.google.com/g/golang-nuts/c/c-ssaaS7RMI","tags":["Release Notes","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rd02e75766cd333a0df417588460f5e4477060633000bfe94955851fd%40%3Cissues.trafficcontrol.apache.org%3E"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2W4COUPL3YVTZ6RTEIT6LPBDJUFF3VSP/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F3ZSHGNTJWCWYAKY5OLZS2XQQYHSXSUO/"},{"url":"https://security.netapp.com/advisory/ntap-20201202-0004/","tags":["Third Party Advisory"]},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/12166-security-advisory-62","tags":["Third Party Advisory"]},{"url":"https://groups.google.com/g/golang-nuts/c/c-ssaaS7RMI","tags":["Release Notes","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rd02e75766cd333a0df417588460f5e4477060633000bfe94955851fd%40%3Cissues.trafficcontrol.apache.org%3E"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2W4COUPL3YVTZ6RTEIT6LPBDJUFF3VSP/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F3ZSHGNTJWCWYAKY5OLZS2XQQYHSXSUO/"},{"url":"https://security.netapp.com/advisory/ntap-20201202-0004/","tags":["Third Party Advisory"]},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/12166-security-advisory-62","tags":["Third Party Advisory"]}],"products":[{"vendor":"golang","product":"go"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"netapp","product":"cloud_insights_telegraf_agent"},{"vendor":"netapp","product":"trident"}],"updated_at":"2026-11-02T14:06:25.394006Z"}],"osv":[{"id":"ALPINE-CVE-2020-28362","description":"Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.","status":"published","published":"2020-11-18T17:15:11.93Z","modified":"2026-11-03T06:32:25.581523383Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"references":[{"url":"https://security.alpinelinux.org/vuln/CVE-2020-28362","tags":["advisory"]}],"updated_at":"2026-11-03T07:17:57.723967Z"},{"id":"AZL-79068","title":"CVE-2020-28362 affecting package golang 1.25.7-1","description":"Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.","status":"published","published":"2020-11-18T17:15:11Z","modified":"2026-04-21T04:34:37.519347Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28362","tags":["web"]}],"updated_at":"2026-11-02T15:28:10.017343Z"},{"id":"AZL-98991","title":"CVE-2020-28362 affecting package golang 1.27.1-1","description":"Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.","status":"published","published":"2020-11-18T17:15:11Z","modified":"2026-09-16T06:39:01Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28362","tags":["web"]}],"updated_at":"2026-11-02T15:28:12.596039Z"},{"id":"BELL-CVE-2020-28362","title":"CVE-2020-28362 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:43.921261Z","modified":"2026-01-26T09:50:08.72782Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"references":[{"url":"https://docs.bell-sw.com/security/cves/CVE-2020-28362","tags":["advisory"]}],"updated_at":"2026-11-02T15:28:15.925958Z"},{"id":"CVE-2020-28362","description":"Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.","status":"published","published":"2020-11-18T17:15:11.93Z","modified":"2026-10-29T11:12:03.592380231Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"references":[{"url":"https://lists.apache.org/thread.html/rd02e75766cd333a0df417588460f5e4477060633000bfe94955851fd%40%3Cissues.trafficcontrol.apache.org%3E","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2W4COUPL3YVTZ6RTEIT6LPBDJUFF3VSP/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F3ZSHGNTJWCWYAKY5OLZS2XQQYHSXSUO/","tags":["web"]},{"url":"https://groups.google.com/g/golang-nuts/c/c-ssaaS7RMI","tags":["advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20201202-0004/","tags":["advisory"]},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/12166-security-advisory-62","tags":["advisory"]}],"updated_at":"2026-11-02T15:44:16.248747Z"},{"id":"DEBIAN-CVE-2020-28362","description":"Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.","status":"published","published":"2020-11-18T17:15:11.93Z","modified":"2026-08-27T13:03:11.857180722Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"references":[{"url":"https://security-tracker.debian.org/tracker/CVE-2020-28362","tags":["advisory"]}],"updated_at":"2026-11-02T15:45:34.019707Z"},{"id":"RHBA-2021:0482","title":"Red Hat Bug Fix Advisory: Red Hat OpenShift Service Mesh 2.0.2 RPMs","status":"published","published":"2024-09-14T00:40:33Z","modified":"2026-10-13T10:02:02Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"references":[{"url":"https://access.redhat.com/errata/RHBA-2021:0482","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/MAISTRA-2086","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhba-2021_0482.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28362","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1897635","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28362","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28362","tags":["advisory"]}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHSA-2020:5333","title":"Red Hat Security Advisory: go-toolset-1.14-golang security update","status":"published","published":"2024-09-18T04:15:40Z","modified":"2026-10-13T10:01:58Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2020:5333","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_developer_tools/1/html/using_go_1.14.7_toolset","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1897635","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1897643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1897646","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5333.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28362","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28362","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28362","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28366","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28366","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28366","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/NpBGTTmKzpM/m/fLguyiM2CAAJ","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28367","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28367","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28367","tags":["advisory"]}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2020:5493","title":"Red Hat Security Advisory: go-toolset:rhel8 security update","status":"published","published":"2024-09-18T04:16:09Z","modified":"2026-10-13T10:01:58Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2020:5493","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_developer_tools/1/html/using_go_1.14.10_toolset","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1874857","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1897635","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1897643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1897646","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5493.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-24553","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-24553","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-24553","tags":["advisory"]},{"url":"https://groups.google.com/forum/#!topic/golang-announce/8wqlSbkLdPs","tags":["article"]},{"url":"https://www.redteam-pentesting.de/en/advisories/rt-sa-2020-004/-inconsistent-behavior-of-gos-cgi-and-fastcgi-transport-may-lead-to-cross-site-scripting","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28362","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28362","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28362","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28366","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28366","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28366","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/NpBGTTmKzpM/m/fLguyiM2CAAJ","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28367","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28367","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28367","tags":["advisory"]}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2020:5634","title":"Red Hat Security Advisory: OpenShift Container Platform 4.7.0 packages security update","status":"published","published":"2024-09-16T05:16:25Z","modified":"2026-10-13T10:02:02Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2020:5634","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693905","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1886640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1888248","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1889972","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1910081","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1921650","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2020_5634.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-3884","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-3884","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3884","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-8566","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8566","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8566","tags":["advisory"]},{"url":"https://github.com/kubernetes/kubernetes/issues/95624","tags":["article"]},{"url":"https://groups.google.com/g/kubernetes-announce/c/ScdmyORnPDk","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-15157","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-15157","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-15157","tags":["advisory"]},{"url":"https://github.com/containerd/containerd/releases/tag/v1.2.14","tags":["article"]},{"url":"https://github.com/containerd/containerd/security/advisories/GHSA-742w-89gc-8m9c","tags":["article"]},{"url":"https://www.openwall.com/lists/oss-security/2020/10/15/1","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-25658","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-25658","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25658","tags":["advisory"]},{"url":"https://github.com/sybrenstuvel/python-rsa/issues/165","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28362","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1897635","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28362","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28362","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3121","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3121","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3121","tags":["advisory"]}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2021:0038","title":"Red Hat Security Advisory: OpenShift Container Platform 4.6.12 packages and security update","status":"published","published":"2024-09-16T05:17:59Z","modified":"2026-10-13T10:02:03Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2021:0038","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1895939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1895940","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1895941","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1895945","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1895946","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1895947","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1897635","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0038.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2304","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2304","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2304","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2145","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2305","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2305","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2305","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2115","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2306","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2306","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2306","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2104","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2307","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2307","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2307","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-1646","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2308","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2308","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2308","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2102","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2309","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2309","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2309","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2103","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28362","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28362","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28362","tags":["advisory"]}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:0145","title":"Red Hat Security Advisory: Red Hat OpenShift Serverless Client kn 1.12.0","status":"published","published":"2024-09-18T04:16:08Z","modified":"2026-10-13T10:02:04Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2021:0145","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless_applications/installing-openshift-serverless-1#installing-kn","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1874857","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1897635","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1897643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1897646","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1906386","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0145.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-24553","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-24553","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-24553","tags":["advisory"]},{"url":"https://groups.google.com/forum/#!topic/golang-announce/8wqlSbkLdPs","tags":["article"]},{"url":"https://www.redteam-pentesting.de/en/advisories/rt-sa-2020-004/-inconsistent-behavior-of-gos-cgi-and-fastcgi-transport-may-lead-to-cross-site-scripting","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28362","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28362","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28362","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28366","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28366","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28366","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/NpBGTTmKzpM/m/fLguyiM2CAAJ","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28367","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28367","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28367","tags":["advisory"]}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:0172","title":"Red Hat Security Advisory: OpenShift Container Platform 4.6.13 packages and security update","status":"published","published":"2024-09-18T02:36:04Z","modified":"2026-10-13T10:02:05Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2021:0172","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1886637","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1917413","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0172.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-8564","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8564","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8564","tags":["advisory"]},{"url":"https://github.com/kubernetes/kubernetes/issues/95622","tags":["article"]},{"url":"https://groups.google.com/g/kubernetes-announce/c/ScdmyORnPDk","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-15586","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1856953","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-15586","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-15586","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/XZNfaiwgt2w/m/E6gHDs32AQAJ","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-16845","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1867099","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-16845","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-16845","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/NyPIaucMgXo","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28362","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1897635","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28362","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28362","tags":["advisory"]}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:0706","title":"Red Hat Security Advisory: container-tools:2.0 security update","status":"published","published":"2024-09-13T22:44:29Z","modified":"2026-10-13T10:02:10Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2021:0706","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1915734","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0706.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28362","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1897635","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28362","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28362","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-20188","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-20188","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20188","tags":["advisory"]}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:0956","title":"Red Hat Security Advisory: OpenShift Container Platform 4.6.23 security update","status":"published","published":"2024-09-18T02:35:18Z","modified":"2026-10-13T10:02:13Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2021:0956","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1856953","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1867099","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1941433","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0956.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-15586","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-15586","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-15586","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/XZNfaiwgt2w/m/E6gHDs32AQAJ","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-16845","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-16845","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-16845","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/NyPIaucMgXo","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28362","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1897635","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28362","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28362","tags":["advisory"]}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:1366","title":"Red Hat Security Advisory: OpenShift Container Platform 4.7.9 packages and security update","status":"published","published":"2024-09-18T04:17:58Z","modified":"2026-10-13T10:02:17Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2021:1366","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1856953","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1867099","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1897635","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1918750","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1953464","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1366.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-15586","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-15586","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-15586","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/XZNfaiwgt2w/m/E6gHDs32AQAJ","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-16845","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-16845","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-16845","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/NyPIaucMgXo","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28362","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28362","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28362","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3114","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3114","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3114","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/mperVMGa98w","tags":["article"]}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:1551","title":"Red Hat Security Advisory: OpenShift Container Platform 4.7.11 security and bug fix update","status":"published","published":"2024-09-29T18:06:11Z","modified":"2026-10-13T10:02:19Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2021:1551","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1897635","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1918750","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1945710","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1945714","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1959660","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1551.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28362","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28362","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28362","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3114","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3114","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3114","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/mperVMGa98w","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21639","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1947102","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21639","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21639","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1947105","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21640","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21640","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-28163","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-28163","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-28163","tags":["advisory"]},{"url":"https://github.com/eclipse/jetty.project/security/advisories/GHSA-j6qj-j888-vvgq","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-28165","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-28165","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-28165","tags":["advisory"]},{"url":"https://github.com/eclipse/jetty.project/security/advisories/GHSA-26vr-8j45-3r4w","tags":["article"]}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:2042","title":"Red Hat Security Advisory: Red Hat OpenShift Container Storage 4.7 RPM security, bug fix, and enhancement update","status":"published","published":"2024-09-30T13:55:21Z","modified":"2026-10-17T10:01:25Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2021:2042","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1883371","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1897635","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1941502","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2042.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-26160","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-26160","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-26160","tags":["advisory"]},{"url":"https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMDGRIJALVAJWTGO-596515","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28362","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28362","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28362","tags":["advisory"]}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"UBUNTU-CVE-2020-28362","description":"Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.","status":"published","published":"2020-11-18T17:15:00Z","modified":"2025-10-24T04:48:54Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"references":[{"url":"https://ubuntu.com/security/CVE-2020-28362","tags":["report"]},{"url":"https://groups.google.com/g/golang-announce/c/NpBGTTmKzpM/m/fLguyiM2CAAJ","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28362","tags":["report"]}],"updated_at":"2026-11-02T15:54:24.541803Z"},{"id":"ALSA-2021:0706","title":"Important: container-tools:2.0 security update","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* podman: container users permissions are not respected in privileged containers (CVE-2021-20188)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2021-03-02T18:48:35Z","modified":"2026-10-29T11:12:04.202716572Z","references":[{"url":"https://access.redhat.com/errata/RHSA-2021:0706","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/1915734","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2021-0706.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2021-20188","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2020-28362.html","tags":["report"]}],"updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"BIT-golang-2020-28362","description":"Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.","status":"published","published":"2024-03-06T11:07:49.873Z","modified":"2026-09-08T08:47:46.894951355Z","references":[{"url":"https://groups.google.com/g/golang-nuts/c/c-ssaaS7RMI","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/rd02e75766cd333a0df417588460f5e4477060633000bfe94955851fd%40%3Cissues.trafficcontrol.apache.org%3E","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2W4COUPL3YVTZ6RTEIT6LPBDJUFF3VSP/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F3ZSHGNTJWCWYAKY5OLZS2XQQYHSXSUO/","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20201202-0004/","tags":["advisory"]},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/12166-security-advisory-62","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28362","tags":["web"]}],"updated_at":"2026-11-02T15:28:30.70064Z"},{"id":"GO-2021-0069","title":"Panic during division of very large numbers in math/big","description":"A number of math/big.Int methods can panic when provided large inputs due to a flawed division method.","status":"published","published":"2021-04-14T20:04:52Z","modified":"2024-05-20T16:03:47Z","references":[{"url":"https://go.dev/cl/269657","tags":["fix"]},{"url":"https://go.googlesource.com/go/+/1e1fa5903b760c6714ba17e50bf850b01f49135c","tags":["fix"]},{"url":"https://go.dev/issue/42552","tags":["report"]},{"url":"https://groups.google.com/g/golang-announce/c/NpBGTTmKzpM/m/fLguyiM2CAAJ","tags":["web"]}],"updated_at":"2026-11-02T15:47:00.604718Z"},{"id":"openSUSE-SU-2020:2047-1","title":"Security update for go1.14","description":"This update for go1.14 fixes the following issues:\n\n- go1.14.12 (released 2020-11-12) includes security fixes to the cmd/go and math/big packages.\n  * go#42553 math/big: panic during recursive division of very large numbers (bsc#1178750 CVE-2020-28362)\n  * go#42560 cmd/go: arbitrary code can be injected into cgo generated files (bsc#1178752 CVE-2020-28367)\n  * go#42557 cmd/go: improper validation of cgo flags can lead to remote code execution at build time (bsc#1178753 CVE-2020-28366)\n  * go#42155 time: Location interprets wrong timezone (DST) with slim zoneinfo\n  * go#42112 x/net/http2: the first write error on a connection will cause all subsequent write requests to fail blindly\n  * go#41991 runtime: macOS-only segfault on 1.14+ with 'split stack overflow'\n  * go#41913 net/http: request.Clone doesn't deep copy TransferEncoding\n  * go#41703 runtime: macOS syscall.Exec can get SIGILL due to preemption signal\n  * go#41386 x/net/http2: connection-level flow control not returned if stream errors, causes server hang\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-11-26T17:27:02Z","modified":"2026-02-04T03:29:29.981031Z","references":[{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/E2QCSRQATMLK7WM4IWLILC7IQJFW7PVI/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1164903","tags":["report"]},{"url":"https://bugzilla.suse.com/1178750","tags":["report"]},{"url":"https://bugzilla.suse.com/1178752","tags":["report"]},{"url":"https://bugzilla.suse.com/1178753","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28367","tags":["web"]}],"updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2020:2067-1","title":"Security update for go1.14","description":"This update for go1.14 fixes the following issues:\n\n- go1.14.12 (released 2020-11-12) includes security fixes to the cmd/go and math/big packages.\n  * go#42553 math/big: panic during recursive division of very large numbers (bsc#1178750 CVE-2020-28362)\n  * go#42560 cmd/go: arbitrary code can be injected into cgo generated files (bsc#1178752 CVE-2020-28367)\n  * go#42557 cmd/go: improper validation of cgo flags can lead to remote code execution at build time (bsc#1178753 CVE-2020-28366)\n  * go#42155 time: Location interprets wrong timezone (DST) with slim zoneinfo\n  * go#42112 x/net/http2: the first write error on a connection will cause all subsequent write requests to fail blindly\n  * go#41991 runtime: macOS-only segfault on 1.14+ with 'split stack overflow'\n  * go#41913 net/http: request.Clone doesn't deep copy TransferEncoding\n  * go#41703 runtime: macOS syscall.Exec can get SIGILL due to preemption signal\n  * go#41386 x/net/http2: connection-level flow control not returned if stream errors, causes server hang\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-11-27T05:24:15Z","modified":"2026-02-04T04:06:01.090533Z","references":[{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IQVUQXAVUQCNNOSHNTQGRCAEYALRL2NA/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1164903","tags":["report"]},{"url":"https://bugzilla.suse.com/1178750","tags":["report"]},{"url":"https://bugzilla.suse.com/1178752","tags":["report"]},{"url":"https://bugzilla.suse.com/1178753","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28367","tags":["web"]}],"updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2020:2139-1","title":"Security update for go1.15","description":"This update for go1.15 fixes the following issues:\n\n- go1.15.5 (released 2020-11-12) includes security fixes to the cmd/go and math/big packages.\n  * go#42553 math/big: panic during recursive division of very large numbers (bsc#1178750 CVE-2020-28362)\n  * go#42560 cmd/go: arbitrary code can be injected into cgo generated files (bsc#1178752 CVE-2020-28367)\n  * go#42557 cmd/go: improper validation of cgo flags can lead to remote code execution at build time (bsc#1178753 CVE-2020-28366)\n  * go#42169 cmd/compile, runtime, reflect: pointers to go:notinheap types must be stored indirectly in interfaces\n  * go#42151 cmd/cgo: opaque struct pointers are broken since Go 1.15.3\n  * go#42138 time: Location interprets wrong timezone (DST) with slim zoneinfo\n  * go#42113 x/net/http2: the first write error on a connection will cause all subsequent write requests to fail blindly\n  * go#41914 net/http: request.Clone doesn't deep copy TransferEncoding\n  * go#41704 runtime: macOS syscall.Exec can get SIGILL due to preemption signal\n  * go#41463 compress/flate: deflatefast produces corrupted output\n  * go#41387 x/net/http2: connection-level flow control not returned if stream errors, causes server hang\n  * go#40974 cmd/link: sectionForAddress(0xA9D67F) address not in any section file\n","status":"published","published":"2020-12-01T11:24:50Z","modified":"2025-05-07T18:12:02.175654Z","references":[{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HGUG34M7TVN5CJXWIHJF454FAT7TTWY/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1175132","tags":["report"]},{"url":"https://bugzilla.suse.com/1178750","tags":["report"]},{"url":"https://bugzilla.suse.com/1178752","tags":["report"]},{"url":"https://bugzilla.suse.com/1178753","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28367","tags":["web"]}],"updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2024:10807-1","title":"go1.14-1.14.15-1.6 on GA media","description":"These are all security issues fixed in the go1.14-1.14.15-1.6 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:32:42.416924Z","references":[{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15586","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-24553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3115","tags":["web"]}],"updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"openSUSE-SU-2024:10808-1","title":"go1.15-1.15.15-1.2 on GA media","description":"These are all security issues fixed in the go1.15-1.15.15-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:46:55.765323Z","references":[{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2020-24553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-27918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-31525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-34558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-36221","tags":["web"]}],"updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2020:3368-1","title":"Security update for go1.15","description":"This update for go1.15 fixes the following issues:\n\n- go1.15.5 (released 2020-11-12) includes security fixes to the cmd/go and math/big packages.\n  * go#42553 math/big: panic during recursive division of very large numbers (bsc#1178750 CVE-2020-28362)\n  * go#42560 cmd/go: arbitrary code can be injected into cgo generated files (bsc#1178752 CVE-2020-28367)\n  * go#42557 cmd/go: improper validation of cgo flags can lead to remote code execution at build time (bsc#1178753 CVE-2020-28366)\n  * go#42169 cmd/compile, runtime, reflect: pointers to go:notinheap types must be stored indirectly in interfaces\n  * go#42151 cmd/cgo: opaque struct pointers are broken since Go 1.15.3\n  * go#42138 time: Location interprets wrong timezone (DST) with slim zoneinfo\n  * go#42113 x/net/http2: the first write error on a connection will cause all subsequent write requests to fail blindly\n  * go#41914 net/http: request.Clone doesn't deep copy TransferEncoding\n  * go#41704 runtime: macOS syscall.Exec can get SIGILL due to preemption signal\n  * go#41463 compress/flate: deflatefast produces corrupted output\n  * go#41387 x/net/http2: connection-level flow control not returned if stream errors, causes server hang\n  * go#40974 cmd/link: sectionForAddress(0xA9D67F) address not in any section file\n","status":"published","published":"2020-11-19T08:24:49Z","modified":"2026-02-04T04:01:40.902856Z","references":[{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203368-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1175132","tags":["report"]},{"url":"https://bugzilla.suse.com/1178750","tags":["report"]},{"url":"https://bugzilla.suse.com/1178752","tags":["report"]},{"url":"https://bugzilla.suse.com/1178753","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28367","tags":["web"]}],"updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2020:3369-1","title":"Security update for go1.14","description":"This update for go1.14 fixes the following issues:\n\n- go1.14.12 (released 2020-11-12) includes security fixes to the cmd/go and math/big packages.\n  * go#42553 math/big: panic during recursive division of very large numbers (bsc#1178750 CVE-2020-28362)\n  * go#42560 cmd/go: arbitrary code can be injected into cgo generated files (bsc#1178752 CVE-2020-28367)\n  * go#42557 cmd/go: improper validation of cgo flags can lead to remote code execution at build time (bsc#1178753 CVE-2020-28366)\n  * go#42155 time: Location interprets wrong timezone (DST) with slim zoneinfo\n  * go#42112 x/net/http2: the first write error on a connection will cause all subsequent write requests to fail blindly\n  * go#41991 runtime: macOS-only segfault on 1.14+ with 'split stack overflow'\n  * go#41913 net/http: request.Clone doesn't deep copy TransferEncoding\n  * go#41703 runtime: macOS syscall.Exec can get SIGILL due to preemption signal\n  * go#41386 x/net/http2: connection-level flow control not returned if stream errors, causes server hang\n","status":"published","published":"2020-11-19T08:26:22Z","modified":"2026-02-04T02:23:40.308155Z","references":[{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203369-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1164903","tags":["report"]},{"url":"https://bugzilla.suse.com/1178750","tags":["report"]},{"url":"https://bugzilla.suse.com/1178752","tags":["report"]},{"url":"https://bugzilla.suse.com/1178753","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28367","tags":["web"]}],"updated_at":"2026-11-02T15:53:48.11786Z"}]}}