TI-2023-24278 CVE-2023-45288 · GHSA-4v7x-pqxf-cx7m
HTTP/2 CONTINUATION flood in net/http
Priority HIGH 81
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames.
RHSA-2025:7753
Errata Advisory for Red Hat OpenShift GitOps v1.15.2 security update
Released 2025-05-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift GitOps 1.15 openshift-gitops-1/argo-rollouts-rhel8, openshift-gitops-1/argocd-extensions-rhel8, openshift-gitops-1/argocd-rhel8 +7
Fixes 8 records
TI-2024-37791 CVE-2024-57083 · GHSA-9rhg-254w-fh9x
A prototype pollution in the component Module.mergeObjects (redoc/bundles/redoc.lib.js:2)…
Priority HIGH 72
A prototype pollution in the component Module.mergeObjects (redoc/bundles/redoc.lib.js:2) of redoc <= 2.2.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.
TI-2025-16741 CVE-2025-22869 · GHSA-hcg3-q754-cr77
Potential denial of service in golang.org/x/crypto
Priority MEDIUM 41
SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but nev…
TI-2025-21540 CVE-2025-30204 · GHSA-mh63-6h87-95cp
jwt-go allows excessive memory allocation during header parsing
Priority MEDIUM 40
golang-jwt is a Go implementation of JSON Web Tokens.
TI-2025-21197 CVE-2025-29786 · GHSA-93mq-9ffx-83m2
Memory Exhaustion in Expr Parser with Unrestricted Input
Priority MEDIUM 40
Expr is an expression language and expression evaluation for Go.
TI-2025-16740 CVE-2025-22868 · GHSA-6v2p-p543-phr9
Unexpected memory consumption during token parsing in golang.org/x/oauth2
Priority MEDIUM 40
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.
TI-2024-12525 CVE-2024-13484 · GHSA-58fx-7v9q-3g56
Openshift-gitops-operator-container: namespace isolation break
Priority LOW 37
A flaw was found in openshift-gitops-operator-container.
TI-2025-20001 CVE-2025-27144 · GHSA-c6gw-w398-hv78
Go JOSE's Parsing Vulnerable to Denial of Service
Priority LOW 35
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards.