Search for packages
| purl | pkg:rpm/redhat/openshift-serverless-1-eventing-in-memory-channel-dispatcher-rhel8@container-0.18?arch=6-2 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-35cj-b5rn-aaar
Aliases: CVE-2020-24553 |
Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header. | There are no reported fixed by versions. |
|
VCID-e5tr-qam3-aaad
Aliases: CVE-2020-28366 |
Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via a malicious unquoted symbol name in a linked object file. | There are no reported fixed by versions. |
|
VCID-tx59-xnak-aaaj
Aliases: CVE-2020-28367 |
Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via malicious gcc flags specified via a #cgo directive. | There are no reported fixed by versions. |
|
VCID-uwa2-eyvn-aaaj
Aliases: CVE-2020-28362 |
Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|