Search for packages
Package details: pkg:rpm/redhat/openshift-serverless-1-eventing-storage-version-migration-rhel8@container-0.22?arch=0-2
purl pkg:rpm/redhat/openshift-serverless-1-eventing-storage-version-migration-rhel8@container-0.22?arch=0-2
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-2ps9-t61s-aaan
Aliases:
CVE-2021-33196
In archive/zip in Go before 1.15.13 and 1.16.x before 1.16.5, a crafted file count (in an archive's header) can cause a NewReader or OpenReader panic. There are no reported fixed by versions.
VCID-gk52-c5p2-aaam
Aliases:
CVE-2021-27918
encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader (for xml.NewTokenDecoder) returns EOF in the middle of an element. This can occur in the Decode, DecodeElement, or Skip method. There are no reported fixed by versions.
VCID-mtfq-ngz6-aaad
Aliases:
CVE-2021-31525
GHSA-h86h-8ppg-mxmh
net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service (panic) via a large header to ReadRequest or ReadResponse. Server, Transport, and Client can each be affected in some configurations. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version