TI-2023-24278 CVE-2023-45288 · GHSA-4v7x-pqxf-cx7m
HTTP/2 CONTINUATION flood in net/http
Priority HIGH 81
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames.
RHSA-2024:6811
OpenShift Container Platform 4.13.51 bug fix and security update
Released 2024-09-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.13 openshift4/ose-cluster-openshift-controller-manager-operator, openshift4/ose-hypershift-rhel8, openshift4/ose-openshift-apiserver-rhel8 +1
Fixes 5 records
TI-2023-25448 CVE-2023-47108 · GHSA-8pgv-569h-w5rw
DoS vulnerability in otelgrpc (uncontrolled resource consumption) due to unbound cardinality metrics
Priority HIGH 72
OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go.
TI-2024-06865 CVE-2024-7409 · GHSA-7c7g-wccp-rrhj
Qemu: denial of service via improper synchronization in qemu nbd server during socket closure
Priority MEDIUM 41
A flaw was found in the QEMU NBD Server.
TI-2023-24163 CVE-2023-45142 · GHSA-rcjv-mgp8-qvmr
OpenTelemetry-Go Contrib has DoS vulnerability in otelhttp due to unbound cardinality metrics
Priority LOW 36
OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go.
TI-2024-05657 CVE-2024-6104 · GHSA-v6v8-xj6m-xwqh
go-retryablehttp can leak basic auth credentials to log files
Priority LOW 27
go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file.