openshift vulnerabilities (Red Hat)
267 vulnerabilities.
openshiftRed HatGo JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)4.3 MediumopenshiftRed Hatjose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext4.9 MediumopenshiftRed HatErrors returned from JSON marshaling may break template escaping in html/template5.4 MediumopenshiftRed HatComments in display names are incorrectly handled in net/mail7.5 HighopenshiftRed HatIncorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http4.3 MediumopenshiftRed HatMemory exhaustion in multipart form parsing in net/textproto and net/http6.5 MediumopenshiftRed HatVerify panics on certificates with an unknown public key algorithm in crypto/x5095.9 MediumopenshiftRed HatInfinite loop in JSON unmarshaling in google.golang.org/protobuf7.5 HighopenshiftRed HatPrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin5.9 MediumopenshiftRed HatDenial of service via chunk extensions in net/http5.3 MediumopenshiftRed HatBefore Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel7.5 HighopenshiftRed HatHAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers...8.2 HighopenshiftRed HatWerkzeug vulnerable to high resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning8.0 HighopenshiftRed HatHTTP/2 rapid reset can cause excessive work in net/http7.5 HighopenshiftRed HatKube-apiserver: privesc8.0 HighopenshiftRed HatService monitor mac flow is not rate limited5.3 MediumopenshiftRed HatCri-o: security regression of cve-2022-276524.8 MediumopenshiftRed HatPanic when processing post-handshake message on QUIC connections in crypto/tls7.5 HighopenshiftRed HatMemory exhaustion in QUIC connection handling in crypto/tls7.5 HighopenshiftRed HatImproper handling of special tags within script contexts in html/template6.1 MediumopenshiftRed HatImproper handling of HTML-like comments in script contexts in html/template6.1 MediumopenshiftRed HatLarge RSA keys can cause high CPU usage in crypto/tls5.3 MediumopenshiftRed HatImproper rendering of text nodes in golang.org/x/net/html6.1 MediumopenshiftRed Hatgoproxy Denial of Service vulnerability7.5 HighopenshiftRed HatInsufficient sanitization of Host header in net/http6.5 MediumopenshiftRed HatEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 HighopenshiftRed HatWithdrawn: Use after free in SciPy9.8 CriticalopenshiftRed HatOcp & fips mode7.0 HighopenshiftRed HatBypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin6.5 MediumopenshiftRed HatBypassing policies imposed by the ImagePolicyWebhook admission plugin6.5 MediumopenshiftRed HatImproper handling of empty HTML attributes in html/template7.3 HighopenshiftRed HatImproper handling of JavaScript whitespace in html/template9.8 CriticalopenshiftRed HatImproper sanitization of CSS values in html/template7.3 HighopenshiftRed HatFlask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header7.5 HighopenshiftRed HatBackticks not treated as string delimiters in html/template9.8 CriticalopenshiftRed HatInfinite loop in parsing in go/scanner7.5 HighopenshiftRed HatExcessive resource consumption in net/http, net/textproto and mime/multipart7.5 HighopenshiftRed HatExcessive memory allocation in net/http and net/textproto7.5 HighopenshiftRed HatPodman Time-of-check Time-of-use (TOCTOU) Race Condition6.8 MediumopenshiftRed HatInformation disclosure through error stack traces related to agents5.3 MediumopenshiftRed HatIncorrect Authorization in Jenkins Core4.4 MediumopenshiftRed HatIncorrect Authorization in Jenkins Core7.0 HighopenshiftRed HatCross-site Scripting vulnerability in Jenkins9.6 CriticalopenshiftRed HatOpencontainers runc Incorrect Authorization vulnerability7.0 HighopenshiftRed HatUnauthorized read of Custom Resources6.5 MediumopenshiftRed HatExcessive resource consumption in mime/multipart7.5 HighopenshiftRed HatDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 HighopenshiftRed HatPanic on large handshake records in crypto/tls7.5 HighopenshiftRed HatPath traversal on Windows in path/filepath7.5 HighopenshiftRed HatWerkzeug may allow high resource usage when parsing multipart form data with many fields7.5 High- Show moreLoading…