Red Hat Security AdvisoryRHSA-2021:1369
Red Hat Advanced Cluster Management 2.1.6 security and bug fix updates
Released 2021-04-26 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Advanced Cluster Management for Kubernetes 2.1 for RHEL 8 rhacm2/acm-must-gather-rhel8
Fixes 2 records
Priority LOW 37
The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01886 · Published 2020-06-17 · Partial fix · 0.3.3 CWE-835
Priority LOW 26
lib/utils.js in mquery before 3.2.3 allows a pollution attack because a special property (e.g., __proto__) can be copied during a merge or clone operation.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01041 · Published 2020-12-11 · Fixed in 3.2.3 CWE-94
