TI-2023-24278 CVE-2023-45288 · GHSA-4v7x-pqxf-cx7m
HTTP/2 CONTINUATION flood in net/http
Priority HIGH 81
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames.
RHSA-2024:2773
OpenShift Container Platform 4.15.13 bug fix and security update
Released 2024-05-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.15 openshift4/ose-agent-installer-node-agent-rhel9, openshift4/ose-azure-workload-identity-webhook-rhel8, openshift4/ose-cluster-api-rhel9 +3
Fixes 6 records
TI-2023-25448 CVE-2023-47108 · GHSA-8pgv-569h-w5rw
DoS vulnerability in otelgrpc (uncontrolled resource consumption) due to unbound cardinality metrics
Priority HIGH 72
OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go.
TI-2023-19273 CVE-2023-37788 · GHSA-4r8x-2p26-976p
goproxy v1.1 was discovered to contain an issue which can lead to a Denial of service (DoS) via unspecified vectors.
Priority HIGH 72
goproxy v1.1 was discovered to contain an issue which can lead to a Denial of service (DoS) via unspecified vectors.
TI-2024-16303 CVE-2024-24786 · GHSA-8r3f-844c-mc37
Infinite loop in JSON unmarshaling in google.golang.org/protobuf
Priority MEDIUM 41
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON.
TI-2023-24163 CVE-2023-45142 · GHSA-rcjv-mgp8-qvmr
OpenTelemetry-Go Contrib has DoS vulnerability in otelhttp due to unbound cardinality metrics
Priority LOW 36
OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go.
TI-2024-18756 CVE-2024-28180 · GHSA-c5q2-7r4c-mv6g
Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)
Priority LOW 26
Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards.