microshift-gateway-api vulnerabilities (Red Hat)
12 vulnerabilities.
-
microshift-gateway-apiRed Hat Limit handshake messages we are willing to accept post-handshake in crypto/tls 7.5 High -
microshift-gateway-apiRed Hat Avoid quadratic complexity in resolvePath in net/url 5.9 Medium -
microshift-gateway-apiRed Hat Fix Javascript regexp context tracking in html/template 6.1 Medium -
microshift-gateway-apiRed Hat Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http 7.5 High -
microshift-gateway-apiRed Hat Enforce maximum recursion depth in encoding/asn1 7.5 High -
microshift-gateway-apiRed Hat Quadratic complexity in WordDecoder.DecodeHeader in mime 7.5 High -
microshift-gateway-apiRed Hat Quadratic string concatenation in consumePhrase in net/mail 7.5 High -
microshift-gateway-apiRed Hat Quadratic string concatentation in consumeComment in net/mail 7.5 High -
microshift-gateway-apiRed Hat Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net 7.5 High -
microshift-gateway-apiRed Hat SpdyStream: DOS on CRI 8.7 High -
microshift-gateway-apiRed Hat gRPC-Go has an authorization bypass via missing leading slash in :path 9.1 Critical -
microshift-gateway-apiRed Hat runc container breakout through process.cwd trickery and leaked fds 8.6 High