TI-2024-30406 CVE-2024-45336 · GHSA-7wrw-r4p8-38rx
Sensitive headers incorrectly sent after cross-domain redirect in net/http
Priority LOW 28
The HTTP client drops sensitive headers after following a cross-domain redirect.
RHSA-2025:3922
Red Hat OpenShift Service Mesh Containers for 2.5.10
Released 2025-04-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHOSSM 2.5 for RHEL 8 openshift-service-mesh/kiali-rhel8
Fixes 2 records
TI-2025-16738 CVE-2025-22866 · GHSA-3whm-j4xm-rv8x
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec
Priority LOW 19
Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture.