TI-2024-24810 CVE-2024-37298 · GHSA-3669-72x9-r9p3
Potential memory exhaustion attack due to sparse slice deserialization
Priority HIGH 72
gorilla/schema converts structs to and from form values.
RHSA-2024:5202
OpenShift Container Platform 4.12.63 packages and security update
Released 2024-08-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.12 cri-o-1.25.3-7.rhaos4.12.git44a2cb2.el9, cri-o-1.25.5-25.rhaos4.12.git6556f50.el8, podman-3:4.2.0-11.rhaos4.12.el9 +13
Fixes 3 records
TI-2024-16307 CVE-2024-24790 · GHSA-49gw-vxvf-fc2g
Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip
Priority MEDIUM 53
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
TI-2023-24280 CVE-2023-45290 · GHSA-rr6r-cfgf-gc6h
Memory exhaustion in multipart form parsing in net/textproto and net/http
Priority LOW 31
When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile), limits on the total size of the parsed form were not app…