Read the docs
Red Hat Security Advisory

RHSA-2023:3495

Logging Subsystem 5.7.2 - Red Hat OpenShift security update

Released 2023-06-12 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 3 records

TI-2022-20114 CVE-2022-41723 · GHSA-vvpx-j8f3-3w6h

Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

Priority MEDIUM 46

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04561 Published 2023-02-28 Partial fix · 1.19.6, 1.20.1 +1 CWE-400
TI-2023-12699 CVE-2023-28120 · GHSA-pj73-v5mw-pm9j

Cross-site scripting in Rails ActiveSupport

Priority LOW 26

There is a vulnerability in ActiveSupport if the new bytesplice method is called on a SafeBuffer with untrusted user input.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00948 Published 2025-01-09 Partial fix · 7.0.4.3, 6.1.7.3 CWE-79