TI-2020-06240 CVE-2020-7720 · GHSA-92xj-mqp7-vmcj
Prototype pollution in node-forge
Priority MEDIUM 48
The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function.
RHSA-2020:5605
Red Hat OpenShift Container Storage 4.6.0 security, bug fix, enhancement update
Released 2020-12-17 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Storage 4.6 on RHEL-8 ocs4/cephcsi-rhel8, ocs4/mcg-core-rhel8, ocs4/mcg-rhel8-operator +3
Fixes 5 records
TI-2020-12850 CVE-2020-16845
Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint…
Priority MEDIUM 41
Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.
TI-2020-11000 CVE-2020-14040 · GHSA-5rcv-m4m3-hfh7
The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could…
Priority LOW 37
The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory.
TI-2020-06655 CVE-2020-8237 · GHSA-wgfq-7857-4jcc
Prototype pollution in json-bigint npm package < 1.0.0 may lead to a denial-of-service (DoS) attack.
Priority LOW 36
Prototype pollution in json-bigint npm package < 1.0.0 may lead to a denial-of-service (DoS) attack.
TI-2020-12262 CVE-2020-15586 · GHSA-9rmg-8r3f-xrq7
Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as…
Priority LOW 32
Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and writes a response at the same time.