TI-2023-24278 CVE-2023-45288 · GHSA-4v7x-pqxf-cx7m
HTTP/2 CONTINUATION flood in net/http
Priority HIGH 81
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames.
RHSA-2024:4010
OpenShift Container Platform 4.14.31 security update
Released 2024-06-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.14 openshift4/ose-aws-cloud-controller-manager-rhel8, openshift4/ose-olm-rukpak-rhel8, openshift4/ose-operator-lifecycle-manager +4
Fixes 4 records
TI-2023-26623 CVE-2023-48795 · GHSA-45x7-px36-x8w8
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6…
Priority HIGH 70
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…
TI-2023-27069 CVE-2023-49568 · GHSA-mw99-9chc-xw7r
Maliciously crafted Git server replies can cause DoS on go-git clients
Priority LOW 34
A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11.
TI-2024-18756 CVE-2024-28180 · GHSA-c5q2-7r4c-mv6g
Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)
Priority LOW 26
Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards.