TI-2021-02215 CVE-2021-3121 · GHSA-c3h9-896r-86jm
An issue was discovered in GoGo Protobuf before 1.3.2.
Priority MEDIUM 43
An issue was discovered in GoGo Protobuf before 1.3.2.
RHSA-2021:2920
OpenShift Virtualization 4.8.0 Images
Released 2021-07-28 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- CNV 4.8 for RHEL 8 container-native-virtualization/vm-import-operator-rhel8
Fixes 5 records
TI-2020-17810 CVE-2020-29652 · GHSA-3vm4-22fp-5rfm
A nil pointer dereference in the golang.org/x/crypto/ssh component through…
Priority LOW 39
A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers.
TI-2020-16885 CVE-2020-27813 · GHSA-3xh2-74w9-5vxm
Integer overflow in golang-github-gorilla-websocket
Priority LOW 37
An integer overflow vulnerability exists with the length of websocket frames received via a websocket connection.
TI-2021-10195 CVE-2021-29482 · GHSA-25xm-hr59-7c27
denial of service in github.com/ulikunitz/xz
Priority LOW 36
xz is a compression and decompression library focusing on the xz format completely written in Go.
TI-2021-02209 CVE-2021-3114 · GHSA-gwfm-9vvh-63r3
In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate…
Priority LOW 34
In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the final complete reduction in the P-224 field.