THREATIST.IORead the docs Red Hat 3scale API Management 2.10.0 security update and release
Released 2021-04-08 · Red Hat rating Moderate · View on Red Hat →
golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the golang.org/x/crypto/ssh package.
A vulnerability was found that the 3scale dev portal does not employ mechanisms for protection against login CSRF.
The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory.