TI-2025-21197 CVE-2025-29786 · GHSA-93mq-9ffx-83m2
Memory Exhaustion in Expr Parser with Unrestricted Input
Priority MEDIUM 40
Expr is an expression language and expression evaluation for Go.
RHSA-2025:3335
opentelemetry-collector security update
Released 2025-03-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) opentelemetry-collector-0.107.0-8.el9_5
Fixes 4 records
TI-2025-16740 CVE-2025-22868 · GHSA-6v2p-p543-phr9
Unexpected memory consumption during token parsing in golang.org/x/oauth2
Priority MEDIUM 40
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.
TI-2025-20001 CVE-2025-27144 · GHSA-c6gw-w398-hv78
Go JOSE's Parsing Vulnerable to Denial of Service
Priority LOW 35
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards.
TI-2024-30406 CVE-2024-45336 · GHSA-7wrw-r4p8-38rx
Sensitive headers incorrectly sent after cross-domain redirect in net/http
Priority LOW 28
The HTTP client drops sensitive headers after following a cross-domain redirect.