TI-2022-08598 CVE-2022-24785 · GHSA-8hfj-j24r-96c4
Path Traversal in Moment.js
Priority MEDIUM 54
Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates.
RHSA-2022:5006
Red Hat OpenShift Service Mesh 2.1.3 Containers security update
Released 2022-06-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- OpenShift Service Mesh 2.1 openshift-service-mesh/kiali-rhel8
Fixes 5 records
TI-2022-08493 CVE-2022-24675 · GHSA-q42m-q8hq-53rj
encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data.
Priority MEDIUM 45
encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data.
TI-2022-07828 CVE-2022-23806 · GHSA-8c83-vp4v-h7fq
Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can…
Priority MEDIUM 45
Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element.
TI-2022-01520 CVE-2022-1650 · GHSA-6h5x-7c5m-7cr7
Improper Removal of Sensitive Information Before Storage or Transfer in eventsource/eventsource
Priority MEDIUM 44
Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior to v2.0.2.
TI-2022-11099 CVE-2022-28327 · GHSA-v5qw-m6mv-3q79
The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1…
Priority MEDIUM 40
The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input.