TI-2021-06035 CVE-2021-23337 · GHSA-35jh-r3h4-6jhm
Command injection in Lodash
Priority MEDIUM 59
Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.
RHSA-2021:2543
Red Hat OpenShift Jaeger 1.20.4 security update
Released 2021-06-24 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenShift Jaeger 1.20 distributed-tracing/jaeger-agent-rhel8, distributed-tracing/jaeger-all-in-one-rhel8, distributed-tracing/jaeger-collector-rhel8 +5
Fixes 6 records
TI-2020-10925 CVE-2020-13949 · GHSA-g2fg-mr77-6vrm
Uncontrolled resource consumption in Apache Thrift
Priority MEDIUM 43
In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service.
TI-2020-17303 CVE-2020-28500 · GHSA-29mw-wpgm-hmr9
Regular expression denial of service (ReDoS) in Lodash
Priority MEDIUM 40
Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.
TI-2020-17201 CVE-2020-28362 · GHSA-gff4-9rfx-4pcw
Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.
Priority LOW 39
Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.
TI-2021-02209 CVE-2021-3114 · GHSA-gwfm-9vvh-63r3
In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate…
Priority LOW 34
In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the final complete reduction in the P-224 field.
TI-2021-11653 CVE-2021-31525 · GHSA-h86h-8ppg-mxmh
net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a…
Priority LOW 33
net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service (panic) via a large header to ReadRequest or ReadResponse.