TI-2021-16611 CVE-2021-39226 · GHSA-69j6-29vr-p3j9
Snapshot authentication bypass in grafana
Priority CRITICAL 100KEV
Grafana is an open source data visualization platform.
RHSA-2022:6308
OpenShift Container Platform 4.8.49 security update
Released 2022-09-14 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.8 openshift4/egress-router-cni-rhel8, openshift4/network-tools-rhel8, openshift4/ose-aws-ebs-csi-driver-rhel8 +47
Fixes 6 records
TI-2022-10176 CVE-2022-26945 · GHSA-x24g-9w7v-vprh
go-getter up to 1.5.11 and 2.0.2 allowed protocol switching, endless redirect, and…
Priority MEDIUM 46
go-getter up to 1.5.11 and 2.0.2 allowed protocol switching, endless redirect, and configuration bypass via abuse of custom HTTP response header processing.
TI-2022-12556 CVE-2022-30321 · GHSA-fcgg-rvwg-jv58
go-getter up to 1.5.11 and 2.0.2 allowed arbitrary host access via go-getter path…
Priority MEDIUM 43
go-getter up to 1.5.11 and 2.0.2 allowed arbitrary host access via go-getter path traversal, symlink processing, and command injection flaws.
TI-2022-12558 CVE-2022-30323 · GHSA-28r2-q6m8-9hpx
go-getter up to 1.5.11 and 2.0.2 panicked when processing password-protected ZIP files.
Priority MEDIUM 40
go-getter up to 1.5.11 and 2.0.2 panicked when processing password-protected ZIP files.
TI-2022-12557 CVE-2022-30322 · GHSA-cjr4-fv6c-f3mv
go-getter up to 1.5.11 and 2.0.2 allowed asymmetric resource exhaustion when go-getter…
Priority MEDIUM 40
go-getter up to 1.5.11 and 2.0.2 allowed asymmetric resource exhaustion when go-getter processed malicious HTTP responses.
TI-2022-12767 CVE-2022-30631 · GHSA-r654-8j96-crqx
Stack exhaustion when reading certain archives in compress/gzip
Priority LOW 37
Uncontrolled recursion in Reader.Read in compress/gzip before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via an archive containing a large number of concatenated 0-length compres…