TI-2024-35732 CVE-2024-53270
HTTP/1: sending overload crashes when the request is reset beforehand in envoy
Priority HIGH 66
Envoy is a cloud-native high-performance edge/middle/service proxy.
RHSA-2025:1053
Red Hat OpenShift Service Mesh Containers for 2.6.5
Released 2025-02-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHOSSM 2.6 for RHEL 9 openshift-service-mesh/proxyv2-rhel9
Fixes 2 records
TI-2024-30408 CVE-2024-45338 · GHSA-w32m-9786-jp63
Non-linear parsing of case-insensitive content in golang.org/x/net/html
Priority LOW 32
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing.