Red Hat Security AdvisoryRHSA-2021:0516
Release of OpenShift Serverless 1.13.0 security update
Released 2021-02-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Openshift Serverless 1.13 openshift-serverless-1/client-kn-rhel8, openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8, openshift-serverless-1/eventing-controller-rhel8 +25
Fixes 1 record
Priority LOW 37
jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with []string{} for m["aud"] (which is allowed by the specification).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02158 · Published 2020-09-30 · Partial fix · 4.0.0-preview1 CWE-287
