TI-2023-27070 CVE-2023-49569 · GHSA-449p-3h89-pw88
Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients
Priority MEDIUM 52
A path traversal vulnerability was discovered in go-git versions prior to v5.11.
RHSA-2024:1896
OpenShift Container Platform 4.12.56 security update
Released 2024-04-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.12 openshift4/cloud-network-config-controller-rhel8, openshift4/egress-router-cni-rhel8, openshift4/kubevirt-csi-driver-rhel8 +47
Fixes 3 records
TI-2023-27069 CVE-2023-49568 · GHSA-mw99-9chc-xw7r
Maliciously crafted Git server replies can cause DoS on go-git clients
Priority LOW 34
A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11.
TI-2023-20467 CVE-2023-39326 · GHSA-9f76-wg39-x86h
Denial of service via chunk extensions in net/http
Priority LOW 26
A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body.