TI-2024-25207 CVE-2024-37890 · GHSA-3h5v-q93c-6h6q
Denial of service when handling a request with many HTTP headers in ws
Priority HIGH 72
ws is an open source WebSocket client and server for Node.js.
RHSA-2024:5547
Red Hat OpenShift Data Foundation 4.16.1 bug fix and security update
Released 2024-08-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHODF 4.16 for RHEL 9 odf4/cephcsi-rhel9, odf4/mcg-core-rhel9, odf4/mcg-rhel9-operator +2
Fixes 4 records
TI-2024-16307 CVE-2024-24790 · GHSA-49gw-vxvf-fc2g
Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip
Priority MEDIUM 53
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
TI-2024-16305 CVE-2024-24788 · GHSA-2jwv-jmq4-4j3r
Malformed DNS message can cause infinite loop in net
Priority LOW 28
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.
TI-2024-05657 CVE-2024-6104 · GHSA-v6v8-xj6m-xwqh
go-retryablehttp can leak basic auth credentials to log files
Priority LOW 27
go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file.