Search for packages
| purl | pkg:rpm/redhat/csi-driver-manila-operator-container@4.11.0-202303240327.p0.gce6c43b.assembly?arch=stream |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-h89x-2eq9-aaar
Aliases: CVE-2021-38561 GHSA-ppp9-7jff-5vj2 |
golang.org/x/text/language in golang.org/x/text before 0.3.7 can panic with an out-of-bounds read during BCP 47 language tag parsing. Index calculation is mishandled. If parsing untrusted user input, this can be used as a vector for a denial-of-service attack. | There are no reported fixed by versions. |
|
VCID-v1rb-pm4j-aaae
Aliases: CVE-2021-20329 GHSA-f6mq-5m25-4r72 |
Specific cstrings input may not be properly validated in the MongoDB Go Driver when marshalling Go objects into BSON. A malicious user could use a Go object with specific string to potentially inject additional fields into marshalled documents. This issue affects all MongoDB GO Drivers up to (and including) 1.5.0. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|