TI-2024-11957 CVE-2024-12905 · GHSA-pq67-2wwv-3xjx
Path traversal in tar-fs
Priority MEDIUM 43
An Improper Link Resolution Before File Access ("Link Following") and Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal").
RHSA-2025:3932
Red Hat OpenShift Dev Spaces 3.20.0 release
Released 2025-04-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Dev Spaces 3 devspaces/devspaces-rhel9-operator, devspaces/pluginregistry-rhel9
Fixes 3 records
TI-2025-16741 CVE-2025-22869 · GHSA-hcg3-q754-cr77
Potential denial of service in golang.org/x/crypto
Priority MEDIUM 41
SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but nev…
TI-2025-16740 CVE-2025-22868 · GHSA-6v2p-p543-phr9
Unexpected memory consumption during token parsing in golang.org/x/oauth2
Priority MEDIUM 40
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.