Search for packages
| purl | pkg:rpm/redhat/buildah@2:1.33.9-1?arch=el9_4 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 3.4 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-hfxt-nnd8-dfc8
Aliases: CVE-2024-34156 |
encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion | There are no reported fixed by versions. |
|
VCID-hs7s-yxfz-mbf1
Aliases: CVE-2024-34155 |
go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion | There are no reported fixed by versions. |
|
VCID-p3we-3y2n-vugu
Aliases: CVE-2024-9341 GHSA-mc76-5925-c5p6 |
Link Following in github.com/containers/common A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system into mounting sensitive host directories inside a container. This issue also allows attackers to access critical host files, bypassing the intended isolation between containers and the host system. | There are no reported fixed by versions. |
|
VCID-rdqf-wp1t-j7b5
Aliases: CVE-2024-34158 |
go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-04T20:07:06.812005+00:00 | RedHat Importer | Affected by | VCID-hfxt-nnd8-dfc8 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-34156.json | 38.1.0 |
| 2026-04-01T13:45:26.170049+00:00 | RedHat Importer | Affected by | VCID-hs7s-yxfz-mbf1 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-34155.json | 38.0.0 |
| 2026-04-01T13:45:25.458694+00:00 | RedHat Importer | Affected by | VCID-rdqf-wp1t-j7b5 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-34158.json | 38.0.0 |
| 2026-04-01T13:45:21.968797+00:00 | RedHat Importer | Affected by | VCID-hfxt-nnd8-dfc8 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-34156.json | 38.0.0 |
| 2026-04-01T13:44:52.024567+00:00 | RedHat Importer | Affected by | VCID-p3we-3y2n-vugu | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-9341.json | 38.0.0 |