Red Hat Security Advisory

RHSA-2024:10895

Cost Management Metrics Operator Update

Released 2024-12-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Cost Management Metrics Operator 3.3.2 registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator

TI-2024-22605 CVE-2024-34155 · GHSA-8xfx-rj4p-23jm

LOW 22

Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00839 Published 2024-09-06 Partial fix · 1.22.7, 1.23.1