{"id":"CVE-2022-28131","aliases":["ALPINE-CVE-2022-28131","ALSA-2022:5775","ALSA-2022:5799","ALSA-2022:7519","ALSA-2022:7529","ALSA-2022:8057","ALSA-2023:2758","ALSA-2023:2802","AZL-10531","AZL-79000","AZL-98970","BELL-CVE-2022-28131","BIT-golang-2022-28131","DEBIAN-CVE-2022-28131","EUVD-2022-32613","GHSA-3p2w-3263-9gr3","GO-2022-0521","MGASA-2022-0262","OESA-2022-1783","RHSA-2022:5775","RHSA-2022:5799","RHSA-2022:5866","RHSA-2022:6042","RHSA-2022:6113","RHSA-2022:7519","RHSA-2022:7529","RHSA-2022:8057","RHSA-2023:0407","RHSA-2023:2758","RHSA-2023:2802","RLSA-2022:5775","RLSA-2022:5799","RLSA-2022:7519","RLSA-2022:7529","RLSA-2022:8057","RLSA-2023:2758","RLSA-2023:2802","SUSE-SU-2022:2671-1","SUSE-SU-2022:2672-1","SUSE-SU-2023:2312-1","UBUNTU-CVE-2022-28131","USN-6038-1","USN-6038-2","openSUSE-SU-2024:12189-1","openSUSE-SU-2024:12190-1"],"status":"published","title":"Stack exhaustion from deeply nested XML documents in encoding/xml","description":"Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a deeply nested XML document.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.02559,"percentile":0.8518,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-674"],"published":"2022-07-16T19:58:20Z","modified":"2026-11-03T07:30:36Z","fixes":[{"ecosystem":"Alpine:v3.16","package":"go","fixed_in":["1.18.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"go","fixed_in":["1.18.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"go","fixed_in":["1.18.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"go","fixed_in":["1.18.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"go","fixed_in":["1.18.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"go","fixed_in":["1.18.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"go","fixed_in":["1.18.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"go","fixed_in":["1.18.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"go","fixed_in":["1.18.4-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"golang","fixed_in":["1.18.5-1"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"golang","fixed_in":["1.17.12","1.18.4"],"sources":["osv"]},{"ecosystem":"Go","package":"stdlib","fixed_in":["1.17.12","1.18.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"golang-1.13","fixed_in":["1.13.8-1ubuntu1~16.04.3+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"golang-1.18","fixed_in":["1.18.1-1ubuntu1~18.04.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"golang-1.13","fixed_in":["1.13.8-1ubuntu1~18.04.4+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"golang-1.16","fixed_in":["1.16.2-0ubuntu1~18.04.2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.13","fixed_in":["1.13.8-1ubuntu1.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.16","fixed_in":["1.16.2-0ubuntu1~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.18","fixed_in":["1.18.1-1ubuntu1~20.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"golang-1.13","fixed_in":["1.13.8-1ubuntu2.22.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"golang-1.18","fixed_in":["1.18.1-1ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.16","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.18.0"},{"fixed":"1.18.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.18.0"},{"fixed":"1.18.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.18.0"},{"fixed":"1.18.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.18.0"},{"fixed":"1.18.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.18.0"},{"fixed":"1.18.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.18.0"},{"fixed":"1.18.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.18.0"},{"fixed":"1.18.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.18.0"},{"fixed":"1.18.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.18.0"},{"fixed":"1.18.4-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"delve","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.2-1.module_el8.6.0+2736+ec10aba8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"go-toolset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.12-1.module_el8.6.0+3065+e17ed2d4"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.12-1.module_el8.6.0+3065+e17ed2d4"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"golang-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.12-1.module_el8.6.0+3065+e17ed2d4"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"golang-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.12-1.module_el8.6.0+3065+e17ed2d4"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"golang-misc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.12-1.module_el8.6.0+3065+e17ed2d4"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"golang-race","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.12-1.module_el8.6.0+3065+e17ed2d4"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"golang-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.12-1.module_el8.6.0+3065+e17ed2d4"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"golang-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.12-1.module_el8.6.0+3065+e17ed2d4"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.12-1.el9_0"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"golang-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.12-1.el9_0"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"golang-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.12-1.el9_0"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"golang-misc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.12-1.el9_0"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"golang-race","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.12-1.el9_0"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"golang-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.12-1.el9_0"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"golang-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.12-1.el9_0"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.15-3.el8"}]}],"bundled":15},{"source":"osv","ecosystem":"AlmaLinux:8","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.9-6.module_el8.7.0+3297+1eb250cf"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.9-6.module_el8.7.0+3297+1eb250cf"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"29-2.module_el8.6.0+2876+9ed4eae2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.26-3.module_el8.7.0+3297+1eb250cf"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.189.0-1.module_el8.7.0+3406+a17c4180"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.189.0-1.module_el8.6.0+3336+00d107d5"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.189.0-1.module_el8.7.0+3297+1eb250cf"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.1-1.module_el8.6.0+2876+9ed4eae2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.1-1.module_el8.6.0+3136+bfcd65b6"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.4-2.module_el8.7.0+3297+1eb250cf"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-1.module_el8.6.0+2876+9ed4eae2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-1.module_el8.6.0+3136+bfcd65b6"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-1.module_el8.6.0+2876+9ed4eae2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-1.module_el8.6.0+3136+bfcd65b6"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18-3.module_el8.6.0+2876+9ed4eae2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18-3.module_el8.6.0+3136+bfcd65b6"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-2.module_el8.6.0+2876+9ed4eae2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-2.module_el8.6.0+3136+bfcd65b6"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-1.module_el8.6.0+3136+bfcd65b6"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-1.module_el8.6.0+2876+9ed4eae2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-1.module_el8.6.0+2876+9ed4eae2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-1.module_el8.6.0+3136+bfcd65b6"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-3.module_el8.6.0+2876+9ed4eae2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-3.module_el8.6.0+3136+bfcd65b6"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.1-13.module_el8.7.0+3297+1eb250cf"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.1-13.module_el8.7.0+3297+1eb250cf"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.1-13.module_el8.7.0+3297+1eb250cf"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.1-13.module_el8.7.0+3297+1eb250cf"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.1-13.module_el8.7.0+3297+1eb250cf"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.1-13.module_el8.7.0+3297+1eb250cf"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-1.module_el8.6.0+2876+9ed4eae2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-1.module_el8.6.0+3136+bfcd65b6"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-73.rc95.module_el8.6.0+3136+bfcd65b6"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-73.rc95.module_el8.6.0+2876+9ed4eae2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.4-2.module_el8.7.0+3297+1eb250cf"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.4-2.module_el8.7.0+3297+1eb250cf"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-1.module_el8.6.0+2876+9ed4eae2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-1.module_el8.6.0+3136+bfcd65b6"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.99.3-1.module_el8.6.0+2876+9ed4eae2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.99.3-1.module_el8.6.0+3136+bfcd65b6"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"toolbox-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.99.3-1.module_el8.6.0+3136+bfcd65b6"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"toolbox-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.99.3-1.module_el8.6.0+2876+9ed4eae2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.4-1.module_el8.6.0+2876+9ed4eae2"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.15-3.el9"}]}],"bundled":15},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.5.0-2.module_el8.8.0+3470+252b1910"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-1.module_el8.8.0+3470+252b1910"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-1.module_el8.8.0+3470+252b1910"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"63.1-1.module_el8.8.0+3557+7ba9cc13"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.6-1.module_el8.8.0+3470+252b1910"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.205.0-2.module_el8.8.0+3557+7ba9cc13"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.0-1.module_el8.8.0+3470+252b1910"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-63.module_el8.8.0+3568+e8578284"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.7.0+3407+95aa0ca9"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.7.0+3407+95aa0ca9"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.7.0+3407+95aa0ca9"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.7.0+3407+95aa0ca9"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-2.module_el8.8.0+3568+e8578284"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10-1.module_el8.8.0+3470+252b1910"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1.module_el8.7.0+3407+95aa0ca9"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1.module_el8.7.0+3407+95aa0ca9"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.5.0-4.module_el8.8.0+3470+252b1910"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.8-1.module_el8.8.0+3470+252b1910"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module_el8.8.0+3568+e8578284"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module_el8.8.0+3568+e8578284"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module_el8.8.0+3568+e8578284"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module_el8.8.0+3568+e8578284"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module_el8.8.0+3568+e8578284"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module_el8.8.0+3568+e8578284"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module_el8.8.0+3568+e8578284"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.7.0+3407+95aa0ca9"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.1-1.module_el8.8.0+3470+252b1910"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.4-1.module_el8.7.0+3407+95aa0ca9"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.2-0.2.module_el8.8.0+3470+252b1910"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.2-0.2.module_el8.8.0+3470+252b1910"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-2.module_el8.7.0+3407+95aa0ca9"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.99.3-7.module_el8.8.0+3470+252b1910"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"toolbox-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.99.3-7.module_el8.8.0+3470+252b1910"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.6-20.module_el8.8.0+3470+252b1910"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.1-37.module_el8.8.0+3468+16b86c82"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.6-5.module_el8.8.0+3468+16b86c82"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.6-5.module_el8.8.0+3468+16b86c82"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"46-1.module_el8.7.0+3344+5bcd850f"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.1.4-1.module_el8.7.0+3344+5bcd850f"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.199.0-1.module_el8.8.0+3468+16b86c82"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-2.module_el8.7.0+3344+5bcd850f"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-37.module_el8.8.0+3468+16b86c82"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+3137+d33c3efb"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+2877+8e437bf5"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+2877+8e437bf5"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+3137+d33c3efb"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+2877+8e437bf5"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+3137+d33c3efb"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+2877+8e437bf5"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+3137+d33c3efb"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-1.module_el8.8.0+3468+16b86c82"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9-1.module_el8.7.0+3344+5bcd850f"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1.module_el8.6.0+2877+8e437bf5"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1.module_el8.6.0+3137+d33c3efb"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1.module_el8.6.0+3137+d33c3efb"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1.module_el8.6.0+2877+8e437bf5"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.1-37.module_el8.8.0+3468+16b86c82"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-2.module_el8.8.0+3468+16b86c82"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-20.module_el8.8.0+3468+16b86c82"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-20.module_el8.8.0+3468+16b86c82"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-20.module_el8.8.0+3468+16b86c82"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-20.module_el8.8.0+3468+16b86c82"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-20.module_el8.8.0+3468+16b86c82"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-20.module_el8.8.0+3468+16b86c82"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-20.module_el8.8.0+3468+16b86c82"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+3137+d33c3efb"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+2877+8e437bf5"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-1.module_el8.6.0+2877+8e437bf5"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.4-1.module_el8.7.0+3344+5bcd850f"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.2-6.module_el8.8.0+3468+16b86c82"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.2-6.module_el8.8.0+3468+16b86c82"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-2.module_el8.6.0+2877+8e437bf5"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-2.module_el8.6.0+3137+d33c3efb"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.99.3-7.module_el8.8.0+3468+16b86c82"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"toolbox-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.99.3-7.module_el8.8.0+3468+16b86c82"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.6-3.module_el8.6.0+2886+d33c3efb"}]}],"bundled":14},{"source":"osv","ecosystem":"Azure Linux:2","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.18.0"},{"fixed":"1.18.5-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.25.7-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.27.0"},{"last_affected":"1.27.1-1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"golang","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.17.12"},{"introduced":"1.18.0"},{"fixed":"1.18.4"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"golang-1.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.15.15-1","1.15.15-1~deb11u1","1.15.15-1~deb11u2","1.15.15-1~deb11u3","1.15.15-1~deb11u4","1.15.15-2","1.15.15-3","1.15.15-4","1.15.15-5","1.15.9-6"]},{"source":"osv","ecosystem":"Go","package":"stdlib","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.17.12"},{"introduced":"1.18.0-0"},{"fixed":"1.18.4"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.12-1.mga8"}]}],"bundled":9},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.7-14.oe1"}]}],"bundled":10},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.7-14.oe1"}]}],"bundled":10},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-5.oe2203"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"delve","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-1.module+el8.6.0+12972+ebab5911"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"delve-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-1.module+el8.6.0+12972+ebab5911"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"delve-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-1.module+el8.6.0+12972+ebab5911"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"go-toolset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.module+el8.6.0+16014+a372c00b"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.module+el8.6.0+16014+a372c00b"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.module+el8.6.0+16014+a372c00b"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.module+el8.6.0+16014+a372c00b"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-misc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.module+el8.6.0+16014+a372c00b"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-race","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.module+el8.6.0+16014+a372c00b"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.module+el8.6.0+16014+a372c00b"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.module+el8.6.0+16014+a372c00b"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el9_0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"golang-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el9_0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"golang-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el9_0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"golang-misc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el9_0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"golang-race","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el9_0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"golang-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el9_0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"golang-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el9_0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"go-toolset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el9_0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:devtools:2022","package":"go-toolset-1.17-golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el7_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:devtools:2022","package":"go-toolset-1.17-golang-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el7_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:devtools:2022","package":"go-toolset-1.17-golang-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el7_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:devtools:2022","package":"go-toolset-1.17-golang-misc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el7_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:devtools:2022","package":"go-toolset-1.17-golang-race","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el7_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:devtools:2022","package":"go-toolset-1.17-golang-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el7_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:devtools:2022","package":"go-toolset-1.17-golang-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el7_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:devtools:2022","package":"go-toolset-1.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el7_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:devtools:2022","package":"go-toolset-1.17-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el7_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:devtools:2022","package":"go-toolset-1.17-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el7_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:devtools:2022","package":"go-toolset-1.17-scldevel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el7_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:serverless:1.0::el8","package":"openshift-serverless-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-4.el8"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:application_interconnect:1::el8","package":"skupper-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-2.el8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.15-3.el8"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"grafana-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.15-3.el8"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.9-6.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.9-6.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.9-6.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.9-6.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.9-6.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:29-2.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.26-3.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.26-3.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.26-3.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.189.0-1.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.1-1.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.1-1.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.1-1.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.4-2.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-1.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-1.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-1.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-1.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-3.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-3.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-3.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-2.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-2.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-2.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.1-1.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.1-1.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.1-1.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.1-1.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-3.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-3.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-3.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-catatonit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-1.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-73.rc95.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-73.rc95.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-73.rc95.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.4-2.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.4-2.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.4-2.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.4-2.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-1.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-1.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-1.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.3-1.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.3-1.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.3-1.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.3-1.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.4-1.module+el8.7.0+16212+65e1b35f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.15-3.el9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"grafana-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.15-3.el9"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:4.12::el7","package":"kubevirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.0-1057.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:4.12::el7","package":"kubevirt-virtctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.0-1057.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:4.12::el7","package":"kubevirt-virtctl-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.0-1057.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:4.12::el8","package":"kubevirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.0-1057.el8"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:4.12::el8","package":"kubevirt-virtctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.0-1057.el8"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:4.12::el8","package":"kubevirt-virtctl-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.0-1057.el8"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.5.0-2.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-1.module+el8.8.0+18195+471da4bb"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-1.module+el8.8.0+18195+471da4bb"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-1.module+el8.8.0+18195+471da4bb"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-1.module+el8.8.0+18195+471da4bb"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-1.module+el8.8.0+18195+471da4bb"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:63.1-1.module+el8.8.0+18286+cd236dce"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.6-1.module+el8.8.0+18098+9b44df5f"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.6-1.module+el8.8.0+18098+9b44df5f"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.6-1.module+el8.8.0+18098+9b44df5f"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.205.0-2.module+el8.8.0+18438+15d3aa65"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.0-1.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.0-1.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.0-1.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-63.module+el8.8.0+18438+15d3aa65"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-2.module+el8.8.0+18418+f0e540fe"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-2.module+el8.8.0+18418+f0e540fe"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-2.module+el8.8.0+18418+f0e540fe"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10-1.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10-1.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10-1.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.5.0-4.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-1.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-1.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-1.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module+el8.8.0+18438+15d3aa65"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module+el8.8.0+18438+15d3aa65"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-catatonit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module+el8.8.0+18438+15d3aa65"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module+el8.8.0+18438+15d3aa65"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module+el8.8.0+18438+15d3aa65"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module+el8.8.0+18438+15d3aa65"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module+el8.8.0+18438+15d3aa65"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-gvproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module+el8.8.0+18438+15d3aa65"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module+el8.8.0+18438+15d3aa65"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module+el8.8.0+18438+15d3aa65"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module+el8.8.0+18438+15d3aa65"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module+el8.8.0+18438+15d3aa65"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module+el8.8.0+18438+15d3aa65"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.1-1.module+el8.8.0+18275+3a56cc62"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.1-1.module+el8.8.0+18275+3a56cc62"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.4-1.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.4-1.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.4-1.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-2.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-2.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-2.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.3-7.module+el8.8.0+18119+e3deee03"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.3-7.module+el8.8.0+18119+e3deee03"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.3-7.module+el8.8.0+18119+e3deee03"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.3-7.module+el8.8.0+18119+e3deee03"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-20.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.1-37.module+el8.8.0+17954+9046de88"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.6-5.module+el8.8.0+18083+cd85596b"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.6-5.module+el8.8.0+18083+cd85596b"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.6-5.module+el8.8.0+18083+cd85596b"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.6-5.module+el8.8.0+18083+cd85596b"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.6-5.module+el8.8.0+18083+cd85596b"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:46-1.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.1.4-1.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.1.4-1.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.1.4-1.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.199.0-1.module+el8.8.0+18113+8b5b6979"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-2.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-2.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-2.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-37.module+el8.8.0+17954+9046de88"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6-1.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6-1.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6-1.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9-1.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9-1.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9-1.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.1-37.module+el8.8.0+17954+9046de88"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.5-2.module+el8.8.0+18083+cd85596b"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.5-2.module+el8.8.0+18083+cd85596b"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.5-2.module+el8.8.0+18083+cd85596b"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-20.module+el8.8.0+18201+6ad7332c"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-20.module+el8.8.0+18201+6ad7332c"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-catatonit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-20.module+el8.8.0+18201+6ad7332c"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-20.module+el8.8.0+18201+6ad7332c"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-20.module+el8.8.0+18201+6ad7332c"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-20.module+el8.8.0+18201+6ad7332c"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-20.module+el8.8.0+18201+6ad7332c"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-gvproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-20.module+el8.8.0+18201+6ad7332c"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-20.module+el8.8.0+18201+6ad7332c"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-20.module+el8.8.0+18201+6ad7332c"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-20.module+el8.8.0+18201+6ad7332c"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-20.module+el8.8.0+18201+6ad7332c"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-20.module+el8.8.0+18201+6ad7332c"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.0-1.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.0-1.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.4-1.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.4-1.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.4-1.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.2-6.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.2-6.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.2-6.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.2-6.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-2.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-2.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-2.module+el8.8.0+17821+de1b53f1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.3-7.module+el8.8.0+18115+45021590"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.3-7.module+el8.8.0+18115+45021590"}]}],"bundled":14},{"source":"osv","ecosystem":"Rocky Linux:8","package":"delve","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-1.module+el8.6.0+824+8e984c20"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.module+el8.6.0+993+4fde2340"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"go-toolset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.module+el8.6.0+993+4fde2340"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:9","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el9_0"}]}],"bundled":14},{"source":"osv","ecosystem":"Rocky Linux:9","package":"go-toolset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el9_0"}]}],"bundled":14},{"source":"osv","ecosystem":"Rocky Linux:8","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.15-3.el8"}]}],"bundled":15},{"source":"osv","ecosystem":"Rocky Linux:8","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.9-6.module+el8.7.0+1076+9b1c11c1"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:29-2.module+el8.7.0+1076+9b1c11c1"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:29-2.module+el8.4.0+556+40122d08"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:29-2.module+el8.5.0+709+440d5e7e"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:29-2.module+el8.6.0+783+10209741"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.26-3.module+el8.7.0+1076+9b1c11c1"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.26-3.module+el8.4.0+556+40122d08"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.1-1.module+el8.7.0+1076+9b1c11c1"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.1-1.module+el8.4.0+556+40122d08"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.1-1.module+el8.5.0+709+440d5e7e"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.1-1.module+el8.6.0+783+10209741"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.189.0-1.module+el8.7.0+1076+9b1c11c1"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.189.0-1.module+el8.6.0+1054+50b00ff4"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-1.module+el8.7.0+1076+9b1c11c1"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-1.module+el8.4.0+556+40122d08"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-1.module+el8.5.0+709+440d5e7e"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-1.module+el8.6.0+783+10209741"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-3.module+el8.7.0+1076+9b1c11c1"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-3.module+el8.6.0+783+10209741"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-2.module+el8.7.0+1076+9b1c11c1"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-2.module+el8.4.0+558+7340b765"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-2.module+el8.5.0+709+440d5e7e"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-2.module+el8.6.0+783+10209741"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.1-1.module+el8.7.0+1076+9b1c11c1"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.1-1.module+el8.4.0+556+40122d08"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.1-1.module+el8.5.0+709+440d5e7e"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.1-1.module+el8.6.0+783+10209741"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-3.module+el8.7.0+1076+9b1c11c1"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-3.module+el8.5.0+709+440d5e7e"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-3.module+el8.6.0+783+10209741"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.7.0+1076+9b1c11c1"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-73.rc95.module+el8.7.0+1076+9b1c11c1"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-73.rc95.module+el8.5.0+769+55ca48e8"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-73.rc95.module+el8.6.0+783+10209741"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.4-2.module+el8.7.0+1076+9b1c11c1"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-1.module+el8.7.0+1076+9b1c11c1"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-1.module+el8.4.0+537+38cf4e42"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-1.module+el8.5.0+709+440d5e7e"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-1.module+el8.6.0+783+10209741"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.3-1.module+el8.7.0+1076+9b1c11c1"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.3-1.module+el8.5.0+734+8397cf81"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.3-1.module+el8.6.0+783+10209741"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.4-1.module+el8.7.0+1076+9b1c11c1"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.4-1.module+el8.4.0+556+40122d08"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.4-1.module+el8.5.0+709+440d5e7e"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.4-1.module+el8.6.0+783+10209741"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:9","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.15-3.el9"}]}],"bundled":15},{"source":"osv","ecosystem":"Rocky Linux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.9.0+1445+07728297"}]}],"bundled":14},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+1445+07728297"}]}],"bundled":14},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:46-1.module+el8.9.0+1445+07728297"}]}],"bundled":14},{"source":"osv","ecosystem":"Rocky Linux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.9.0+1445+07728297"}]}],"bundled":14},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+1445+07728297"}]}],"bundled":14},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.5-2.module+el8.9.0+1445+07728297"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"go1.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.13-150000.1.42.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"go1.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.13-150000.1.42.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"go1.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.13-150000.1.42.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"go1.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.13-150000.1.42.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"go1.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.13-150000.1.42.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"go1.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.13-150000.1.42.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"go1.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.13-150000.1.42.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"go1.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.13-150000.1.42.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"go1.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.13-150000.1.42.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"go1.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.13-150000.1.42.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"go1.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.13-150000.1.42.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"go1.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.13-150000.1.42.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"go1.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.13-150000.1.42.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"go1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.5-150000.1.25.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"go1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.5-150000.1.25.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"go1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.5-150000.1.25.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"go1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.5-150000.1.25.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"go1.18-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10.1-150000.1.9.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"go1.18-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10.1-150000.1.9.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"go1.18-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10.1-150000.1.9.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"go1.18-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10.1-150000.1.9.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"go1.18-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10.1-150000.1.9.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"go1.18-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10.1-150000.1.9.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"go1.18-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10.1-150000.1.9.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"go1.18-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10.1-150000.1.9.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"go1.18-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10.1-150000.1.9.1"}]}],"bundled":28},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.8-1ubuntu1~16.04.3+esm3"}]}],"versions":["1.13.8-1ubuntu1~16.04.2","1.13.8-1ubuntu1~16.04.3","1.13.8-1ubuntu1~16.04.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"golang-1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.1-1ubuntu1~18.04.4"}]}],"versions":["1.18.1-1ubuntu1~18.04.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.8-1ubuntu1~18.04.4+esm1"}]}],"versions":["1.13.8-1ubuntu1~18.04.2","1.13.8-1ubuntu1~18.04.3","1.13.8-1ubuntu1~18.04.4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"golang-1.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.2-0ubuntu1~18.04.2+esm1"}]}],"versions":["1.16.2-0ubuntu1~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.8-1ubuntu1.2"}]}],"versions":["1.13.1-1ubuntu1","1.13.3-1ubuntu1","1.13.4-1ubuntu1","1.13.5-1ubuntu1","1.13.6-1ubuntu1","1.13.6-2ubuntu1","1.13.7-1ubuntu1","1.13.8-1ubuntu1","1.13.8-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.2-0ubuntu1~20.04.1"}]}],"versions":["1.16.2-0ubuntu1~20.04"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.1-1ubuntu1~20.04.2"}]}],"versions":["1.18.1-1ubuntu1~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.8-1ubuntu2.22.04.2"}]}],"versions":["1.13.8-1ubuntu2","1.13.8-1ubuntu2.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"golang-1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.1-1ubuntu1.1"}]}],"versions":["1.18~beta1-0ubuntu1","1.18~beta2-1ubuntu1","1.18~beta2-1ubuntu2","1.18~rc1-1ubuntu1","1.18-1ubuntu1","1.18.1-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"golang-1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.1-1ubuntu1~18.04.4"}]}],"versions":["1.18.1-1ubuntu1~18.04.3"],"bundled":20},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.1-1ubuntu1~20.04.2"}]}],"versions":["1.18.1-1ubuntu1~20.04.1"],"bundled":20},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"golang-1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.1-1ubuntu1.1"}]}],"versions":["1.18~beta1-0ubuntu1","1.18~beta2-1ubuntu1","1.18~beta2-1ubuntu2","1.18~rc1-1ubuntu1","1.18-1ubuntu1","1.18.1-1ubuntu1"],"bundled":20},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.8-1ubuntu1~16.04.3+esm3"}]}],"versions":["1.13.8-1ubuntu1~16.04.2","1.13.8-1ubuntu1~16.04.3","1.13.8-1ubuntu1~16.04.3+esm2"],"bundled":18},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.8-1ubuntu1~18.04.4+esm1"}]}],"versions":["1.13.8-1ubuntu1~18.04.2","1.13.8-1ubuntu1~18.04.3","1.13.8-1ubuntu1~18.04.4"],"bundled":18},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"golang-1.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.2-0ubuntu1~18.04.2+esm1"}]}],"versions":["1.16.2-0ubuntu1~18.04.2"],"bundled":18},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.8-1ubuntu1.2"}]}],"versions":["1.13.1-1ubuntu1","1.13.3-1ubuntu1","1.13.4-1ubuntu1","1.13.5-1ubuntu1","1.13.6-1ubuntu1","1.13.6-2ubuntu1","1.13.7-1ubuntu1","1.13.8-1ubuntu1","1.13.8-1ubuntu1.1"],"bundled":18},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.2-0ubuntu1~20.04.1"}]}],"versions":["1.16.2-0ubuntu1~20.04"],"bundled":18},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.8-1ubuntu2.22.04.2"}]}],"versions":["1.13.8-1ubuntu2","1.13.8-1ubuntu2.22.04.1"],"bundled":18},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"go1.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.12-1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"go1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.4-1.1"}]}],"bundled":9}],"affected_more":3,"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"go standard library","product":"encoding/xml"},{"vendor":"golang","product":"go"},{"vendor":"netapp","product":"cloud_insights_telegraf"}],"references":[{"url":"https://go.dev/cl/417062","tags":["x_transferred","web","fix"]},{"url":"https://go.googlesource.com/go/+/08c46ed43d80bbb67cb904944ea3417989be4af3","tags":["x_transferred","web","fix"]},{"url":"https://go.dev/issue/53614","tags":["x_transferred","web","report","article"]},{"url":"https://groups.google.com/g/golang-announce/c/nqrv9fbR0zE","tags":["x_transferred","web","article"]},{"url":"https://pkg.go.dev/vuln/GO-2022-0521","tags":["x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-28131","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6/"},{"url":"https://groups.google.com/g/golang-announce"},{"url":"https://security.netapp.com/advisory/ntap-20221111-0009/"},{"url":"https://github.com/advisories/GHSA-3p2w-3263-9gr3"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-28131","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:5775","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1705","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1962","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-28131","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-30630","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-30631","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-30632","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-30633","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-30635","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-32148","tags":["report"]},{"url":"https://bugzilla.redhat.com/2107342","tags":["report"]},{"url":"https://bugzilla.redhat.com/2107371","tags":["report"]},{"url":"https://bugzilla.redhat.com/2107374","tags":["report"]},{"url":"https://bugzilla.redhat.com/2107376","tags":["report"]},{"url":"https://bugzilla.redhat.com/2107383","tags":["report"]},{"url":"https://bugzilla.redhat.com/2107386","tags":["report"]},{"url":"https://bugzilla.redhat.com/2107388","tags":["report"]},{"url":"https://bugzilla.redhat.com/2107390","tags":["report"]},{"url":"https://bugzilla.redhat.com/2107392","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-5775.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:5799","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2022-5799.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7519","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-23648","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-21673","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-21698","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-21702","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-21703","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-21713","tags":["report"]},{"url":"https://bugzilla.redhat.com/2044628","tags":["report"]},{"url":"https://bugzilla.redhat.com/2045880","tags":["report"]},{"url":"https://bugzilla.redhat.com/2050648","tags":["report"]},{"url":"https://bugzilla.redhat.com/2050742","tags":["report"]},{"url":"https://bugzilla.redhat.com/2050743","tags":["report"]},{"url":"https://bugzilla.redhat.com/2065290","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-7519.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7529","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1708","tags":["report"]},{"url":"https://bugzilla.redhat.com/2085361","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-7529.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:8057","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2022-8057.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:2758","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-27664","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-30629","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-32189","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-41717","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-0778","tags":["report"]},{"url":"https://bugzilla.redhat.com/2092793","tags":["report"]},{"url":"https://bugzilla.redhat.com/2113814","tags":["report"]},{"url":"https://bugzilla.redhat.com/2124669","tags":["report"]},{"url":"https://bugzilla.redhat.com/2161274","tags":["report"]},{"url":"https://bugzilla.redhat.com/2168256","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-2758.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:2802","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2989","tags":["report"]},{"url":"https://bugzilla.redhat.com/2115089","tags":["report"]},{"url":"https://bugzilla.redhat.com/2121445","tags":["report"]},{"url":"https://bugzilla.redhat.com/2129766","tags":["report"]},{"url":"https://bugzilla.redhat.com/2152907","tags":["report"]},{"url":"https://bugzilla.redhat.com/2165610","tags":["report"]},{"url":"https://bugzilla.redhat.com/2165790","tags":["report"]},{"url":"https://bugzilla.redhat.com/2166906","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-2802.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-28131","tags":["advisory"]},{"url":"https://pkg.go.dev","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/28xxx/CVE-2022-28131.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-28131","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0262.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30639","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/CUFBL2GZMN756YELNBCPJO3MTCGYXSYH/","tags":["web"]},{"url":"https://go.dev/issue/53188","tags":["web","article"]},{"url":"https://go.dev/issue/53423","tags":["web","article"]},{"url":"https://go.dev/issue/53168","tags":["web","article"]},{"url":"https://go.dev/issue/53611","tags":["web","article"]},{"url":"https://go.dev/issue/53416","tags":["web","article"]},{"url":"https://go.dev/issue/53415","tags":["web","article"]},{"url":"https://go.dev/issue/53616","tags":["web","article"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1783","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32148","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30635","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30634","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30633","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30632","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30631","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30629","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1962","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1705","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2107342","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2107371","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2107374","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2107376","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2107383","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2107386","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2107388","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2107390","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2107392","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5775.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1705","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1962","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-28131","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2092793","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-30629","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/TzIC9-t8Ytg","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-30630","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30630","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-30631","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-30632","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-30633","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-30635","tags":["advisory"]},{"url":"https://go.dev/issue/53615","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-32148","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5799.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-24675","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2077688","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-24675","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24675","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/oecdBNLOml8","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-24921","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064857","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-24921","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24921","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/RP1hfrBYVuk","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-28327","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2077689","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-28327","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-28327","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-29526","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2084085","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-29526","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29526","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/Y5qrqw_lWdU","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2022:5866","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5866.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:6042","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless/index","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/openshift_container_platform/4.7/html/serverless/index","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/openshift_container_platform/4.8/html/serverless/index","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/openshift_container_platform/4.9/html/serverless/index","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/openshift_container_platform/4.10/html/serverless/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2045880","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2094982","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2108527","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6042.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1996","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1996","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1996","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-21698","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21698","tags":["advisory"]},{"url":"https://github.com/prometheus/client_golang/security/advisories/GHSA-cg3q-j54f-5p7p","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2022:6113","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_application_interconnect","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6113.json","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044628","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2050648","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2050742","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2050743","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055348","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2065290","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7519.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-23648","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-23648","tags":["advisory"]},{"url":"https://github.com/braintree/sanitize-url/pull/40","tags":["article"]},{"url":"https://snyk.io/vuln/SNYK-JS-BRAINTREESANITIZEURL-2339882","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-21673","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21673","tags":["advisory"]},{"url":"https://grafana.com/blog/2022/01/18/grafana-8.3.4-and-7.5.13-released-with-important-security-fix/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-21702","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21702","tags":["advisory"]},{"url":"https://github.com/grafana/grafana/security/advisories/GHSA-xc3p-28hw-q24g","tags":["article"]},{"url":"https://grafana.com/blog/2022/02/08/grafana-7.5.15-and-8.3.5-released-with-moderate-severity-security-fixes/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-21703","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21703","tags":["advisory"]},{"url":"https://github.com/grafana/grafana/security/advisories/GHSA-cmf4-h3xc-jw8w","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-21713","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21713","tags":["advisory"]},{"url":"https://github.com/grafana/grafana/security/advisories/GHSA-63g3-9jq3-mccv","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2085361","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7529.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1708","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1708","tags":["advisory"]},{"url":"https://github.com/cri-o/cri-o/security/advisories/GHSA-fcm2-6c3h-pg6j","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055349","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2104367","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8057.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0407","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2030801","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2030806","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2089804","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2100495","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0407.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-38561","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-38561","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-38561","tags":["advisory"]},{"url":"https://pkg.go.dev/vuln/GO-2021-0113","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-44716","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-44716","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44716","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/hcmEScgc00k","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-44717","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-44717","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44717","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.8_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2033280","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2047290","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2059658","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2080458","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2089790","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2090166","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2097708","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2106396","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2113814","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2116481","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2116922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2120435","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2121841","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2123415","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2124414","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2124416","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2124669","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2124705","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2124952","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2126243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2126697","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2128675","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2131741","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2131836","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135970","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135973","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2136319","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2136933","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2138434","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2139052","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2139724","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2140084","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2140087","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2141452","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2142711","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2144754","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2152516","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155828","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2157930","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2158084","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2158469","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2161274","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2161682","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2163759","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2165875","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168256","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2758.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-27664","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27664","tags":["advisory"]},{"url":"https://go.dev/issue/54658","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/x49AQzIVX-s/m/0tgO0pjiBQAJ","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-32189","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32189","tags":["advisory"]},{"url":"https://go.dev/issue/53871","tags":["article"]},{"url":"https://groups.google.com/g/golang-nuts/c/DCFSyTGM0wU","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-41717","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41717","tags":["advisory"]},{"url":"https://go.dev/cl/455635","tags":["article"]},{"url":"https://go.dev/cl/455717","tags":["article"]},{"url":"https://go.dev/issue/56350","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/L_3rmdT0BMU/m/yZDrXjIiBQAJ","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2022-1144","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-0778","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0778","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-qwqv-rqgf-8qh8","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2115089","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2121445","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2129766","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2152907","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2165610","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2165790","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2166906","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2802.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2989","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2989","tags":["advisory"]},{"url":"https://www.benthamsgaze.org/2022/08/22/vulnerability-in-linux-containers-investigation-and-mitigation/","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2022:5775","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:5799","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:7519","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:7529","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:8057","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:2758","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:2802","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222671-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1190649","tags":["report"]},{"url":"https://bugzilla.suse.com/1201434","tags":["report"]},{"url":"https://bugzilla.suse.com/1201436","tags":["report"]},{"url":"https://bugzilla.suse.com/1201437","tags":["report"]},{"url":"https://bugzilla.suse.com/1201440","tags":["report"]},{"url":"https://bugzilla.suse.com/1201443","tags":["report"]},{"url":"https://bugzilla.suse.com/1201444","tags":["report"]},{"url":"https://bugzilla.suse.com/1201445","tags":["report"]},{"url":"https://bugzilla.suse.com/1201447","tags":["report"]},{"url":"https://bugzilla.suse.com/1201448","tags":["report"]},{"url":"https://bugzilla.suse.com/1202035","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30632","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30635","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32148","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32189","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222672-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1193742","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232312-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1183043","tags":["report"]},{"url":"https://bugzilla.suse.com/1198423","tags":["report"]},{"url":"https://bugzilla.suse.com/1198424","tags":["report"]},{"url":"https://bugzilla.suse.com/1198427","tags":["report"]},{"url":"https://bugzilla.suse.com/1199413","tags":["report"]},{"url":"https://bugzilla.suse.com/1200134","tags":["report"]},{"url":"https://bugzilla.suse.com/1200135","tags":["report"]},{"url":"https://bugzilla.suse.com/1200136","tags":["report"]},{"url":"https://bugzilla.suse.com/1200137","tags":["report"]},{"url":"https://bugzilla.suse.com/1203185","tags":["report"]},{"url":"https://bugzilla.suse.com/1204023","tags":["report"]},{"url":"https://bugzilla.suse.com/1204024","tags":["report"]},{"url":"https://bugzilla.suse.com/1204025","tags":["report"]},{"url":"https://bugzilla.suse.com/1204941","tags":["report"]},{"url":"https://bugzilla.suse.com/1206134","tags":["report"]},{"url":"https://bugzilla.suse.com/1206135","tags":["report"]},{"url":"https://bugzilla.suse.com/1208270","tags":["report"]},{"url":"https://bugzilla.suse.com/1208271","tags":["report"]},{"url":"https://bugzilla.suse.com/1208272","tags":["report"]},{"url":"https://bugzilla.suse.com/1208491","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-24675","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27664","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2880","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41725","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2022-28131","tags":["report"]},{"url":"https://github.com/golang/go/commit/90f040ec510dd678b7860d70ca77e5682f4c7e96","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6038-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6038-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-1705","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1962","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2879","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2880","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-27664","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-29526","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-30629","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-30630","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-30631","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-30632","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-30633","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-30635","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-32148","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-32189","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-41715","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-41717","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-24534","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-24537","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-24538","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-28131","title":"Stack exhaustion from deeply nested XML documents in encoding/xml","description":"Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a deeply nested XML document.","status":"published","published":"2022-08-09T00:00:00Z","modified":"2024-08-03T05:48:36.83Z","updated_at":"2026-11-02T14:34:39.233406Z"}],"euvd":[{"id":"EUVD-2022-32613","description":"Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a deeply nested XML document.","status":"published","published":"2022-08-09T00:00:00Z","modified":"2024-08-03T05:48:36Z","updated_at":"2026-11-03T03:25:41.471197Z"}],"ghsa":[{"id":"GHSA-3p2w-3263-9gr3","title":"Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an...","description":"Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a deeply nested XML document.","status":"published","published":"2022-08-11T00:00:17Z","modified":"2023-01-29T05:06:32Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-674"],"updated_at":"2026-11-02T14:46:02.943866Z"}],"nvd":[{"id":"CVE-2022-28131","description":"Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a deeply nested XML document.","status":"published","published":"2022-08-10T20:15:32.767Z","modified":"2026-06-17T04:38:02.23Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-674"],"updated_at":"2026-11-02T14:07:24.750124Z"}],"osv":[{"id":"ALPINE-CVE-2022-28131","description":"Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a deeply nested XML document.","status":"published","published":"2022-08-10T20:15:32.767Z","modified":"2026-11-03T07:30:36.206794812Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:50:38.973973Z"},{"id":"AZL-10531","title":"CVE-2022-28131 affecting package golang for versions less than 1.18.5-1","description":"Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a deeply nested XML document.","status":"published","published":"2022-08-10T20:15:32Z","modified":"2026-04-21T04:20:55.55446Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:01.09948Z"},{"id":"AZL-79000","title":"CVE-2022-28131 affecting package golang 1.25.7-1","description":"Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a deeply nested XML document.","status":"published","published":"2022-08-10T20:15:32Z","modified":"2026-04-21T04:34:34.339596Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:10.017343Z"},{"id":"AZL-98970","title":"CVE-2022-28131 affecting package golang 1.27.1-1","description":"Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a deeply nested XML document.","status":"published","published":"2022-08-10T20:15:32Z","modified":"2026-09-16T06:39:01Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:12.596039Z"},{"id":"BELL-CVE-2022-28131","title":"CVE-2022-28131 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:13:56.13147Z","modified":"2026-01-26T09:47:47.193007Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"DEBIAN-CVE-2022-28131","description":"Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a deeply nested XML document.","status":"published","published":"2022-08-10T20:15:32.767Z","modified":"2026-08-27T23:04:20.698549238Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:36.969609Z"},{"id":"OESA-2022-1783","title":"golang security update","description":"The Go Programming Language\r\n\r\nSecurity Fix(es):\r\n\r\nWhen httputil.ReverseProxy.ServeHTTP was called with a Request.Header map containing a nil value for the X-Forwarded-For header, ReverseProxy would set the client IP as the value of the X-Forwarded-For header, contrary to its documentation. In the more usual case where a Director function set the X-Forwarded-For header value to nil, ReverseProxy would leave the header unmodified as expected.(CVE-2022-32148)\n\nCalling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion.(CVE-2022-30635)\n\nInfinite loop in Read in crypto/rand before Go 1.17.11 and Go 1.18.3 on Windows allows attacker to cause an indefinite hang by passing a buffer larger than 1 \u0026lt;\u0026lt; 32 - 1 bytes. (CVE-2022-30634)\n\nCalling Unmarshal on a XML document into a Go struct which has a nested field that uses the any field tag can cause a panic due to stack exhaustion.(CVE-2022-30633)\n\nCalling Glob on a path which contains a large number of path separators can cause a panic due to stack exhaustion.(CVE-2022-30632)\n\nCalling Reader.Read on an archive containing a large number of concatenated 0-length compressed files can cause a panic due to stack exhaustion.(CVE-2022-30631)\n\nAs required by RFC 8446, section 4.6.1, ticket_age_add now holds arandom 32-bit value. Before this change, this value was always setto 0.(CVE-2022-30629)\n\nCalling Decoder.Skip when parsing a deeply nested XML document can cause a panic due to stack exhaustion.(CVE-2022-28131)\n\nCalling any of the Parse functions on Go source code which contains deeply nested types or declarations can cause a panic due to stack exhaustion.(CVE-2022-1962)\n\nThe HTTP/1 client accepted some invalid Transfer-Encoding headers as indicating a chunked encoding. This could potentially allow for request smuggling, but only if combined with an intermediate server that also improperly failed to reject the header as invalid.(CVE-2022-1705)","status":"published","published":"2022-07-29T11:05:03Z","modified":"2026-08-18T01:16:51.263559868Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2022:5775","title":"Red Hat Security Advisory: go-toolset:rhel8 security and bug fix update","status":"published","published":"2024-10-21T18:06:39Z","modified":"2026-10-20T10:01:24Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:5799","title":"Red Hat Security Advisory: go-toolset and golang security and bug fix update","status":"published","published":"2024-09-30T14:22:37Z","modified":"2026-10-20T10:01:25Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:5866","title":"Red Hat Security Advisory: go-toolset-1.17 and go-toolset-1.17-golang security and bug fix update","status":"published","published":"2024-09-30T14:22:54Z","modified":"2026-10-20T10:01:25Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:6042","title":"Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.24.0","status":"published","published":"2024-09-30T14:23:13Z","modified":"2026-10-20T10:01:26Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:6113","title":"Red Hat Security Advisory: Red Hat Application Interconnect 1.0 Release (rpms)","status":"published","published":"2024-09-30T14:23:13Z","modified":"2026-10-20T10:01:29Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:7519","title":"Red Hat Security Advisory: grafana security, bug fix, and enhancement update","status":"published","published":"2024-09-30T14:28:37Z","modified":"2026-10-20T10:01:30Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:7529","title":"Red Hat Security Advisory: container-tools:3.0 security update","status":"published","published":"2024-10-21T18:11:55Z","modified":"2026-10-20T10:01:31Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:8057","title":"Red Hat Security Advisory: grafana security, bug fix, and enhancement update","status":"published","published":"2024-09-30T14:26:41Z","modified":"2026-10-20T10:01:32Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2023:0407","title":"Red Hat Security Advisory: OpenShift Virtualization 4.12.0 RPMs security update","status":"published","published":"2024-09-30T14:30:59Z","modified":"2026-10-20T10:01:38Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:2758","title":"Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update","status":"published","published":"2024-10-21T18:20:56Z","modified":"2026-10-20T10:01:40Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:2802","title":"Red Hat Security Advisory: container-tools:4.0 security and bug fix update","status":"published","published":"2024-10-21T18:21:29Z","modified":"2026-10-20T10:01:41Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RLSA-2022:5775","title":"Important: go-toolset:rhel8 security and bug fix update","description":"Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. \n\nSecurity Fix(es):\n\n* golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)\n\n* golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)\n\n* golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)\n\n* golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)\n\n* golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)\n\n* golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)\n\n* golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)\n\n* golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)\n\n* golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Clean up dist-git patches (BZ#2110942)\n\n* Update Go to version 1.17.12 (BZ#2110943)","status":"published","published":"2022-08-01T08:57:38Z","modified":"2026-02-04T22:30:05.005771Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2022:5799","title":"Important: go-toolset and golang security and bug fix update","description":"Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. \n\nThe golang packages provide the Go programming language compiler.\n\nSecurity Fix(es):\n\n* golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)\n\n* golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)\n\n* golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)\n\n* golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)\n\n* golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)\n\n* golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)\n\n* golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)\n\n* golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)\n\n* golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Clean up dist-git patches (BZ#2109174)\n\n* Update Go to version 1.17.12 (BZ#2109183)","status":"published","published":"2022-08-01T15:29:25Z","modified":"2026-02-04T07:40:21.568848Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2022:7519","title":"Moderate: grafana security, bug fix, and enhancement update","description":"Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB \u0026 OpenTSDB. \n\nThe following packages have been upgraded to a later upstream version: grafana (7.5.15). (BZ#2055348)\n\nSecurity Fix(es):\n\n* sanitize-url: XSS due to improper sanitization in sanitizeUrl function (CVE-2021-23648)\n\n* golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)\n\n* golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)\n\n* grafana: Forward OAuth Identity Token can allow users to access some data sources (CVE-2022-21673)\n\n* prometheus/client_golang: Denial of service using InstrumentHandlerCounter (CVE-2022-21698)\n\n* grafana: XSS vulnerability in data source handling (CVE-2022-21702)\n\n* grafana: CSRF vulnerability can lead to privilege escalation (CVE-2022-21703)\n\n* grafana: IDOR vulnerability can lead to information disclosure (CVE-2022-21713)\n\n* golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)\n\n* golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)\n\n* golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)\n\n* golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)\n\n* golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)\n\n* golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)\n\n* golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.7 Release Notes linked from the References section.","status":"published","published":"2022-11-08T06:21:47Z","modified":"2026-02-05T03:00:11.598822Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2022:7529","title":"Moderate: container-tools:3.0 security update","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)\n\n* cri-o: memory exhaustion on the node when access to the kube api (CVE-2022-1708)\n\n* golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)\n\n* prometheus/client_golang: Denial of service using InstrumentHandlerCounter (CVE-2022-21698)\n\n* golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)\n\n* golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)\n\n* golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)\n\n* golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)\n\n* golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)\n\n* golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.7 Release Notes linked from the References section.","status":"published","published":"2022-11-08T06:22:08Z","modified":"2026-02-04T17:45:04.993033Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2022:8057","title":"Important: grafana security, bug fix, and enhancement update","description":"Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB \u0026 OpenTSDB. \n\nThe following packages have been upgraded to a later upstream version: grafana (7.5.15). (BZ#2055349)\n\nSecurity Fix(es):\n\n* sanitize-url: XSS due to improper sanitization in sanitizeUrl function (CVE-2021-23648)\n\n* golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)\n\n* golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)\n\n* grafana: Forward OAuth Identity Token can allow users to access some data sources (CVE-2022-21673)\n\n* prometheus/client_golang: Denial of service using InstrumentHandlerCounter (CVE-2022-21698)\n\n* grafana: XSS vulnerability in data source handling (CVE-2022-21702)\n\n* grafana: CSRF vulnerability can lead to privilege escalation (CVE-2022-21703)\n\n* grafana: IDOR vulnerability can lead to information disclosure (CVE-2022-21713)\n\n* golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)\n\n* golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)\n\n* golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)\n\n* golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)\n\n* golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)\n\n* golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)\n\n* golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.","status":"published","published":"2022-11-15T06:14:26Z","modified":"2026-02-05T14:45:03.738134Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2023:2758","title":"Moderate: container-tools:rhel8 security, bug fix, and enhancement update","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)\n\n* golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)\n\n* golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)\n\n* golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)\n\n* golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)\n\n* golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)\n\n* golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)\n\n* golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)\n\n* golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)\n\n* golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)\n\n* golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)\n\n* podman: symlink exchange attack in podman export volume (CVE-2023-0778)\n\n* golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629)\n\n* golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.8 Release Notes linked from the References section.","status":"published","published":"2025-11-28T09:04:16.963841Z","modified":"2025-11-28T09:32:47.978607Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"RLSA-2023:2802","title":"Moderate: container-tools:4.0 security and bug fix update","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)\n\n* golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)\n\n* golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)\n\n* golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)\n\n* golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)\n\n* golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)\n\n* golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)\n\n* golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)\n\n* golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)\n\n* golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)\n\n* golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)\n\n* podman: symlink exchange attack in podman export volume (CVE-2023-0778)\n\n* podman: possible information disclosure and modification (CVE-2022-2989)\n\n* golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.8 Release Notes linked from the References section.","status":"published","published":"2025-11-28T09:04:16.963841Z","modified":"2025-11-28T09:32:48.594457Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"UBUNTU-CVE-2022-28131","description":"Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a deeply nested XML document.","status":"published","published":"2022-08-10T20:15:00Z","modified":"2026-02-04T03:08:43.975176Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:53.899276Z"},{"id":"ALSA-2022:5775","title":"Important: go-toolset:rhel8 security and bug fix update","description":"Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. \nSecurity Fix(es):\n* golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)\n* golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)\n* golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)\n* golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)\n* golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)\n* golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)\n* golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)\n* golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)\n* golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\nBug Fix(es):\n* Clean up dist-git patches (BZ#2110942)\n* Update Go to version 1.17.12 (BZ#2110943)","status":"published","published":"2022-08-01T00:00:00Z","modified":"2026-10-29T11:01:49.014705453Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2022:5799","title":"Important: go-toolset and golang security and bug fix update","description":"Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. \nThe golang packages provide the Go programming language compiler.\nSecurity Fix(es):\n* golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)\n* golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)\n* golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)\n* golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)\n* golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)\n* golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)\n* golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)\n* golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)\n* golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\nBug Fix(es):\n* Clean up dist-git patches (BZ#2109174)\n* Update Go to version 1.17.12 (BZ#2109183)","status":"published","published":"2022-08-01T00:00:00Z","modified":"2026-10-29T11:31:12.980080634Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2022:7519","title":"Moderate: grafana security, bug fix, and enhancement update","description":"Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB \u0026 OpenTSDB. \n\nThe following packages have been upgraded to a later upstream version: grafana (7.5.15). (BZ#2055348)\n\nSecurity Fix(es):\n\n* sanitize-url: XSS due to improper sanitization in sanitizeUrl function (CVE-2021-23648)\n* golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)\n* golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)\n* grafana: Forward OAuth Identity Token can allow users to access some data sources (CVE-2022-21673)\n* prometheus/client_golang: Denial of service using InstrumentHandlerCounter (CVE-2022-21698)\n* grafana: XSS vulnerability in data source handling (CVE-2022-21702)\n* grafana: CSRF vulnerability can lead to privilege escalation (CVE-2022-21703)\n* grafana: IDOR vulnerability can lead to information disclosure (CVE-2022-21713)\n* golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)\n* golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)\n* golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)\n* golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)\n* golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)\n* golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)\n* golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-11-08T00:00:00Z","modified":"2026-10-29T11:01:33.126364069Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2022:7529","title":"Moderate: container-tools:3.0 security update","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)\n* cri-o: memory exhaustion on the node when access to the kube api (CVE-2022-1708)\n* golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)\n* prometheus/client_golang: Denial of service using InstrumentHandlerCounter (CVE-2022-21698)\n* golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)\n* golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)\n* golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)\n* golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)\n* golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)\n* golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-11-08T00:00:00Z","modified":"2026-10-29T11:01:37.978169645Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2022:8057","title":"Important: grafana security, bug fix, and enhancement update","description":"Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB \u0026 OpenTSDB. \n\nThe following packages have been upgraded to a later upstream version: grafana (7.5.15). (BZ#2055349)\n\nSecurity Fix(es):\n\n* sanitize-url: XSS due to improper sanitization in sanitizeUrl function (CVE-2021-23648)\n* golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)\n* golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)\n* grafana: Forward OAuth Identity Token can allow users to access some data sources (CVE-2022-21673)\n* prometheus/client_golang: Denial of service using InstrumentHandlerCounter (CVE-2022-21698)\n* grafana: XSS vulnerability in data source handling (CVE-2022-21702)\n* grafana: CSRF vulnerability can lead to privilege escalation (CVE-2022-21703)\n* grafana: IDOR vulnerability can lead to information disclosure (CVE-2022-21713)\n* golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)\n* golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)\n* golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)\n* golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)\n* golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)\n* golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)\n* golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-11-15T00:00:00Z","modified":"2026-10-29T11:31:18.013612121Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2023:2758","title":"Moderate: container-tools:rhel8 security, bug fix, and enhancement update","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)\n* golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)\n* golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)\n* golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)\n* golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)\n* golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)\n* golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)\n* golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)\n* golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)\n* golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)\n* golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)\n* podman: symlink exchange attack in podman export volume (CVE-2023-0778)\n* golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629)\n* golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-05-16T00:00:00Z","modified":"2026-10-29T11:01:37.16197587Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2023:2802","title":"Moderate: container-tools:4.0 security and bug fix update","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)\n* golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)\n* golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)\n* golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)\n* golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)\n* golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)\n* golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)\n* golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)\n* golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)\n* golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)\n* golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)\n* podman: symlink exchange attack in podman export volume (CVE-2023-0778)\n* podman: possible information disclosure and modification (CVE-2022-2989)\n* golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-05-16T00:00:00Z","modified":"2026-10-29T11:02:04.915592841Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"BIT-golang-2022-28131","title":"Stack exhaustion from deeply nested XML documents in encoding/xml","description":"Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a deeply nested XML document.","status":"published","published":"2024-03-06T11:01:37.507Z","modified":"2025-05-20T10:02:07.006Z","updated_at":"2026-11-02T15:28:30.70064Z"},{"id":"CVE-2022-28131","title":"Stack exhaustion from deeply nested XML documents in encoding/xml","description":"Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a deeply nested XML document.","status":"published","published":"2022-08-09T00:00:00Z","modified":"2026-10-28T02:31:11.441469308Z","updated_at":"2026-11-02T15:44:25.164673Z"},{"id":"GO-2022-0521","title":"Stack exhaustion from deeply nested XML documents in encoding/xml","description":"Calling Decoder.Skip when parsing a deeply nested XML document can cause a panic due to stack exhaustion.","status":"published","published":"2022-07-20T17:02:04Z","modified":"2024-05-20T16:03:47Z","updated_at":"2026-11-02T15:47:00.918515Z"},{"id":"MGASA-2022-0262","title":"Updated golang packages fix security vulnerability","description":"net/http: improper sanitization of Transfer-Encoding header\nThe HTTP/1 client accepted some invalid Transfer-Encoding headers as\nindicating a \"chunked\" encoding. This could potentially allow for request\nsmuggling, but only if combined with an intermediate server that also\nimproperly failed to reject the header as invalid. (CVE-2022-1705)\n\nWhen httputil.ReverseProxy.ServeHTTP was called with a Request.Header map\ncontaining a nil value for the X-Forwarded-For header, ReverseProxy would\nset the client IP as the value of the X-Forwarded-For header, contrary to\nits documentation. In the more usual case where a Director function set\nthe X-Forwarded-For header value to nil, ReverseProxy would leave the\nheader unmodified as expected. (CVE-2022-32148)\n\ncompress/gzip: stack exhaustion in Reader.Read\nCalling Reader.Read on an archive containing a large number of\nconcatenated 0-length compressed files can cause a panic due to stack\nexhaustion. (CVE-2022-30631)\n\nencoding/xml: stack exhaustion in Unmarshal\nCalling Unmarshal on a XML document into a Go struct which has a nested\nfield that uses the any field tag can cause a panic due to stack\nexhaustion. (CVE-2022-30633)\n\nencoding/xml: stack exhaustion in Decoder.Skip\nCalling Decoder.Skip when parsing a deeply nested XML document can cause a\npanic due to stack exhaustion. (CVE-2022-28131)\n\nencoding/gob: stack exhaustion in Decoder.Decode\nCalling Decoder.Decode on a message which contains deeply nested\nstructures can cause a panic due to stack exhaustion. (CVE-2022-30635)\n\npath/filepath: stack exhaustion in Glob\nCalling Glob on a path which contains a large number of path separators\ncan cause a panic due to stack exhaustion. (CVE-2022-30632)\n\nio/fs: stack exhaustion in Glob\nCalling Glob on a path which contains a large number of path separators\ncan cause a panic due to stack exhaustion. (CVE-2022-30630)\n\ngo/parser: stack exhaustion in all Parse* functions\nCalling any of the Parse functions on Go source code which contains deeply\nnested types or declarations can cause a panic due to stack exhaustion.\n(CVE-2022-1962)\n","status":"published","published":"2022-07-16T19:58:20Z","modified":"2026-04-16T04:44:44.03807327Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2024:12189-1","title":"go1.17-1.17.12-1.1 on GA media","description":"These are all security issues fixed in the go1.17-1.17.12-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:13:27.226124Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"openSUSE-SU-2024:12190-1","title":"go1.18-1.18.4-1.1 on GA media","description":"These are all security issues fixed in the go1.18-1.18.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:13:37.018768Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"SUSE-SU-2022:2671-1","title":"Security update for go1.17","description":"This update for go1.17 fixes the following issues:\n\nUpdate to go version 1.17.13 (bsc#1190649):\n\n- CVE-2022-32189: encoding/gob, math/big: decoding big.Float and big.Rat can panic (bsc#1202035).\n- CVE-2022-30635: encoding/gob: stack exhaustion in Decoder.Decode (bsc#1201444).\n- CVE-2022-30631: compress/gzip: stack exhaustion in Reader.Read (bsc#1201437).\n- CVE-2022-1962: go/parser: stack exhaustion in all Parse* functions (bsc#1201448).\n- CVE-2022-28131: encoding/xml: stack exhaustion in Decoder.Skip (bsc#1201443).\n- CVE-2022-1705: net/http: improper sanitization of Transfer-Encoding header (bsc#1201434)\n- CVE-2022-30630: io/fs: stack exhaustion in Glob (bsc#1201447).\n- CVE-2022-32148: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (bsc#1201436)\n- CVE-2022-30632: path/filepath: stack exhaustion in Glob (bsc#1201445).\n- CVE-2022-30633: encoding/xml: stack exhaustion in Unmarshal (bsc#1201440).\n","status":"published","published":"2022-08-04T12:05:44Z","modified":"2026-02-04T02:27:03.343864Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:2672-1","title":"Security update for go1.18","description":"This update for go1.18 fixes the following issues:\n\nUpdate to go version 1.18.5 (bsc#1193742):\n\n- CVE-2022-32189: encoding/gob, math/big: decoding big.Float and big.Rat can panic (bsc#1202035).\n- CVE-2022-1705: net/http: improper sanitization of Transfer-Encoding header (bsc#1201434)\n- CVE-2022-32148: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (bsc#1201436)\n- CVE-2022-30631: compress/gzip: stack exhaustion in Reader.Read (bsc#1201437).\n- CVE-2022-30633: encoding/xml: stack exhaustion in Unmarshal (bsc#1201440).\n- CVE-2022-28131: encoding/xml: stack exhaustion in Decoder.Skip (bsc#1201443).\n- CVE-2022-30635: encoding/gob: stack exhaustion in Decoder.Decode (bsc#1201444).\n- CVE-2022-30632: path/filepath: stack exhaustion in Glob (bsc#1201445).\n- CVE-2022-30630: io/fs: stack exhaustion in Glob (bsc#1201447).\n- CVE-2022-1962: go/parser: stack exhaustion in all Parse* functions (bsc#1201448).\n","status":"published","published":"2022-08-04T12:06:36Z","modified":"2025-05-02T04:32:31.333862Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2023:2312-1","title":"Security update for go1.18-openssl","description":"This update for go1.18-openssl fixes the following issues:\n\n- Add subpackage go1.x-libstd compiled shared object libstd.so (jsc#PED-1962)\n  * Main go1.x package included libstd.so in previous versions\n  * Split libstd.so into subpackage that can be installed standalone\n  * Continues the slimming down of main go1.x package by 40 Mb\n  * Experimental and not recommended for general use, Go currently has no ABI\n  * Upstream Go has not committed to support buildmode=shared long-term\n  * Do not use in packaging, build static single binaries (the default)\n  * Upstream Go go1.x binary releases do not include libstd.so\n  * go1.x Suggests go1.x-libstd so not installed by default Recommends\n  * go1.x-libstd does not Require: go1.x so can install standalone\n  * Provides go-libstd unversioned package name\n  * Fix build step -buildmode=shared std to omit -linkshared\n- Packaging improvements:\n  * go1.x Suggests go1.x-doc so not installed by default Recommends\n  * Use Group: Development/Languages/Go instead of Other\n\n- Improvements to go1.x packaging spec:\n  * On Tumbleweed bootstrap with current default gcc13 and gccgo118\n  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap\n    using go1.x package (%bcond_without gccgo). This is no longer\n    needed on current SLE-12:Update and removing will consolidate\n    the build configurations used.\n  * Change source URLs to go.dev as per Go upstream\n  * On x86_64 export GOAMD64=v1 as per the current baseline.\n    At this time forgo GOAMD64=v3 option for x86_64_v3 support.\n  * On x86_64 %define go_amd64=v1 as current instruction baseline\n\n- Update to version 1.18.10.1 cut from the go1.18-openssl-fips\n  branch at the revision tagged go1.18.10-1-openssl-fips.\n  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips\n  * Merge go1.18.10 into dev.boringcrypto.go1.18\n\n- go1.18.10 (released 2023-01-10) includes fixes to cgo, the\n  compiler, the linker, and the crypto/x509, net/http, and syscall\n  packages.\n  Refs bsc#1193742 go1.18 release tracking\n  * go#57705 misc/cgo: backport needed for dlltool fix\n  * go#57426 crypto/x509: Verify on macOS does not return typed errors\n  * go#57344 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its 'old' argument.\n  * go#57338 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices\n  * go#57213 os: TestLstat failure on Linux Aarch64\n  * go#57211 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length\n  * go#57057 cmd/go: remove test dependency on gopkg.in service\n  * go#57054 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders\n  * go#57044 cgo: malformed DWARF TagVariable entry\n  * go#57028 cmd/cgo: Wrong types in compiler errors with clang 14\n  * go#56833 cmd/link/internal/ppc64: too-far trampoline is reused\n  * go#56711 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target\n  * go#56323 net/http: bad handling of HEAD requests with a body\n","status":"published","published":"2023-05-30T06:54:51Z","modified":"2026-02-04T03:20:56.665396Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"USN-6038-1","title":"golang-1.18 vulnerabilities","description":"It was discovered that the Go net/http module incorrectly handled\nTransfer-Encoding headers in the HTTP/1 client. A remote attacker could\npossibly use this issue to perform an HTTP Request Smuggling attack.\n(CVE-2022-1705)\n\nIt was discovered that Go did not properly manage memory under certain\ncircumstances. An attacker could possibly use this issue to cause a panic\nresulting into a denial of service. (CVE-2022-1962, CVE-2022-27664,\nCVE-2022-28131, CVE-2022-30630, CVE-2022-30631, CVE-2022-30632,\nCVE-2022-30633, CVE-2022-30635, CVE-2022-32189, CVE-2022-41715,\nCVE-2022-41717, CVE-2023-24534, CVE-2023-24537)\n\nIt was discovered that Go did not properly implemented the maximum size of\nfile headers in Reader.Read. An attacker could possibly use this issue to\ncause a panic resulting into a denial of service. (CVE-2022-2879)\n\nIt was discovered that the Go net/http module incorrectly handled query\nparameters in requests forwarded by ReverseProxy. A remote attacker could\npossibly use this issue to perform an HTTP Query Parameter Smuggling attack.\n(CVE-2022-2880)\n\nIt was discovered that Go did not properly manage the permissions for\nFaccessat function. A attacker could possibly use this issue to expose\nsensitive information. (CVE-2022-29526)\n\nIt was discovered that Go did not properly generate the values for\nticket_age_add in session tickets. An attacker could possibly use this\nissue to observe TLS handshakes to correlate successive connections by\ncomparing ticket ages during session resumption. (CVE-2022-30629)\n\nIt was discovered that Go did not properly manage client IP addresses in\nnet/http. An attacker could possibly use this issue to cause ReverseProxy\nto set the client IP as the value of the X-Forwarded-For header.\n(CVE-2022-32148)\n\nIt was discovered that Go did not properly validate backticks (`) as\nJavascript string delimiters, and do not escape them as expected. An\nattacker could possibly use this issue to inject arbitrary Javascript code\ninto the Go template. (CVE-2023-24538)\n","status":"published","published":"2023-04-25T10:23:57Z","modified":"2026-04-27T16:47:20.971153217Z","updated_at":"2026-11-02T16:58:16.738762Z"},{"id":"USN-6038-2","title":"golang-1.13, golang-1.16 vulnerabilities","description":"USN-6038-1 fixed several vulnerabilities in Go 1.18. This update provides\nthe corresponding updates for Go 1.13 and Go 1.16.\n\nCVE-2022-29526 and CVE-2022-30630 only affected Go 1.16.\n\nOriginal advisory details:\n\n It was discovered that the Go net/http module incorrectly handled\n Transfer-Encoding headers in the HTTP/1 client. A remote attacker could\n possibly use this issue to perform an HTTP Request Smuggling attack.\n (CVE-2022-1705)\n \n It was discovered that Go did not properly manage memory under certain\n circumstances. An attacker could possibly use this issue to cause a panic\n resulting into a denial of service. (CVE-2022-1962, CVE-2022-27664,\n CVE-2022-28131, CVE-2022-30630, CVE-2022-30631, CVE-2022-30632,\n CVE-2022-30633, CVE-2022-30635, CVE-2022-32189, CVE-2022-41715,\n CVE-2022-41717, CVE-2023-24534, CVE-2023-24537)\n \n It was discovered that Go did not properly implemented the maximum size of\n file headers in Reader.Read. An attacker could possibly use this issue to\n cause a panic resulting into a denial of service. (CVE-2022-2879)\n \n It was discovered that the Go net/http module incorrectly handled query\n parameters in requests forwarded by ReverseProxy. A remote attacker could\n possibly use this issue to perform an HTTP Query Parameter Smuggling attack.\n (CVE-2022-2880)\n \n It was discovered that Go did not properly manage the permissions for\n Faccessat function. A attacker could possibly use this issue to expose\n sensitive information. (CVE-2022-29526)\n \n It was discovered that Go did not properly generate the values for\n ticket_age_add in session tickets. An attacker could possibly use this\n issue to observe TLS handshakes to correlate successive connections by\n comparing ticket ages during session resumption. (CVE-2022-30629)\n \n It was discovered that Go did not properly manage client IP addresses in\n net/http. An attacker could possibly use this issue to cause ReverseProxy\n to set the client IP as the value of the X-Forwarded-For header.\n (CVE-2022-32148)\n \n It was discovered that Go did not properly validate backticks (`) as\n Javascript string delimiters, and do not escape them as expected. An\n attacker could possibly use this issue to inject arbitrary Javascript code\n into the Go template. (CVE-2023-24538)\n","status":"published","published":"2024-01-09T13:08:13Z","modified":"2026-06-25T13:32:00.500319928Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}