TI-2024-24810 CVE-2024-37298 · GHSA-3669-72x9-r9p3
Potential memory exhaustion attack due to sparse slice deserialization
Priority HIGH 72
gorilla/schema converts structs to and from form values.
RHSA-2024:5634
podman security update
Released 2024-08-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v.9.2) podman-2:4.4.1-20.el9_2, podman-docker-2:4.4.1-20.el9_2, podman-gvproxy-2:4.4.1-20.el9_2 +3
Fixes 3 records
TI-2024-01301 CVE-2024-1394 · GHSA-78hx-gp6g-7mj6
Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads
Priority LOW 36
A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs.
TI-2024-05657 CVE-2024-6104 · GHSA-v6v8-xj6m-xwqh
go-retryablehttp can leak basic auth credentials to log files
Priority LOW 27
go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file.