TI-2023-10161 CVE-2023-24540 · GHSA-7qhm-5mxq-x7vp
Improper handling of JavaScript whitespace in html/template
Priority MEDIUM 52
Not all valid JavaScript whitespace characters are considered to be whitespace.
RHSA-2023:3624
Migration Toolkit for Containers (MTC) 1.7.10 security and bug fix update
Released 2023-06-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- 8Base-RHMTC-1.7 rhmtc/openshift-velero-plugin-rhel8
Fixes 5 records
TI-2023-10159 CVE-2023-24538 · GHSA-v4m2-x4rp-hv22
Backticks not treated as string delimiters in html/template
Priority MEDIUM 47
Templates do not properly consider backticks (`) as Javascript string delimiters, and do not escape them as expected.
TI-2023-10155 CVE-2023-24534 · GHSA-8v5j-pwr7-w5f8
Excessive memory allocation in net/http and net/textproto
Priority LOW 37
HTTP and MIME header parsing can allocate large amounts of memory, even when parsing small inputs, potentially leading to a denial of service.
TI-2023-10158 CVE-2023-24537 · GHSA-fp86-2355-v99r
Infinite loop in parsing in go/scanner
Priority LOW 36
Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can cause an infinite loop due to integer overflow.
TI-2023-10157 CVE-2023-24536 · GHSA-9f7g-gqwh-jpf5
Excessive resource consumption in net/http, net/textproto and mime/multipart
Priority LOW 36
Multipart form parsing can consume large amounts of CPU and memory when processing form inputs containing very large numbers of parts.