Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/cri-tools@1.29.0-3.1?arch=el8
purl pkg:rpm/redhat/cri-tools@1.29.0-3.1?arch=el8
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.4
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-4psv-cefc-7kad
Aliases:
CVE-2024-24783
Multiple vulnerabilities have been discovered in Go, the worst of which could lead to information leakage or a denial of service. There are no reported fixed by versions.
VCID-f8ak-21d8-juff
Aliases:
CVE-2024-24786
GHSA-8r3f-844c-mc37
Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSON The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set. There are no reported fixed by versions.
VCID-wq29-hzz2-5beh
Aliases:
CVE-2023-45290
Multiple vulnerabilities have been discovered in Go, the worst of which could lead to information leakage or a denial of service. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:49:21.601425+00:00 RedHat Importer Affected by VCID-f8ak-21d8-juff https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-24786.json 38.0.0
2026-04-01T13:49:19.171048+00:00 RedHat Importer Affected by VCID-4psv-cefc-7kad https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-24783.json 38.0.0
2026-04-01T13:49:16.190674+00:00 RedHat Importer Affected by VCID-wq29-hzz2-5beh https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-45290.json 38.0.0