Read the docs
Red Hat Security Advisory

RHSA-2024:4464

Red Hat Advanced Cluster Management 2.10.4 security updates and bug fixes

Released 2024-07-10 · Red Hat rating Low · View on Red Hat →

Fixed in

Fixes 2 records

TI-2023-24278 CVE-2023-45288 · GHSA-4v7x-pqxf-cx7m

HTTP/2 CONTINUATION flood in net/http

Priority HIGH 81

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.89455 Published 2024-04-04 Partial fix · 1.21.9, 1.22.2 +1 CWE-400
TI-2024-03788 CVE-2024-4068 · GHSA-grv7-fg5c-xmjg

Memory Exhaustion in braces

Priority MEDIUM 42

The NPM package `braces`, versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory Exhaustion.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01471 Published 2024-05-13 Partial fix · 3.0.3 CWE-1050